chore: rework plugin readmes, json changelogs and standalone repo setup

plugins/opkssh/.commitlintrc.json

@@ -0,0 +1,21 @@
+{
+  "extends": ["@commitlint/config-conventional"],
+  "rules": {
+    "type-enum": [
+      2,
+      "always",
+      [
+        "feat",
+        "fix",
+        "docs",
+        "style",
+        "refactor",
+        "perf",
+        "test",
+        "chore",
+        "revert"
+      ]
+    ],
+    "subject-case": [0]
+  }
+}

plugins/opkssh/.github/funding.yml

@@ -0,0 +1 @@
+custom: https://donate.termix.site/

plugins/opkssh/.github/pull_request_template.md

@@ -0,0 +1,34 @@
+# Overview
+
+_Short summary of what this PR does_
+
+- [ ] Added: ...
+- [ ] Updated: ...
+- [ ] Removed: ...
+- [ ] Fixed: ...
+
+# Changes Made
+
+_Detailed explanation of changes (if needed)_
+
+- ...
+
+# Related Issues
+
+_Link any issues this PR addresses_
+
+- Closes #ISSUE_NUMBER
+- Related to #ISSUE_NUMBER
+
+# Screenshots / Demos
+
+_(Optional: add before/after screenshots, GIFs, or console output)_
+
+# Checklist
+
+- [ ] Code follows project style guidelines
+- [ ] Supports mobile and desktop UI/app (if applicable)
+- [ ] Added the change to `CHANGELOG.json`
+- [ ] `npm run test`, `npm run typecheck` and `npm run validate` pass
+- [ ] I have read `CONTRIBUTING.md`
+- [ ] This is not a translation request. See [docs](https://docs.termix.site/translations)

plugins/opkssh/.gitignore

@@ -0,0 +1,9 @@
+node_modules
+dist
+coverage
+*.log
+.env
+*.tmxplug
+*.tmxplug.sig
+termix-plugin-signing.key
+.termix-tables-*

plugins/opkssh/.husky/commit-msg

@@ -0,0 +1 @@
+npx --no -- commitlint --edit "$1"

plugins/opkssh/.husky/pre-commit

@@ -0,0 +1 @@
+npx lint-staged

plugins/opkssh/.prettierignore

@@ -0,0 +1,4 @@
+dist
+coverage
+node_modules
+package-lock.json

plugins/opkssh/.prettierrc

@@ -0,0 +1,9 @@
+{
+  "semi": true,
+  "singleQuote": false,
+  "tabWidth": 2,
+  "trailingComma": "all",
+  "printWidth": 80,
+  "arrowParens": "always",
+  "endOfLine": "lf"
+}

plugins/opkssh/CHANGELOG.json

@@ -0,0 +1,26 @@
+{
+  "$schema": "https://raw.githubusercontent.com/Termix-SSH/Termix/main/packages/plugin-sdk/schema/changelog.schema.json",
+  "releases": [
+    {
+      "version": "1.0.0",
+      "changes": [
+        {
+          "type": "added",
+          "text": "Adds the OPKSSH auth type to hosts"
+        },
+        {
+          "type": "added",
+          "text": "Sign in with your identity provider in the browser"
+        },
+        {
+          "type": "added",
+          "text": "Certificates last 24 hours, so you sign in once a day"
+        },
+        {
+          "type": "added",
+          "text": "Uses a pinned, checksum verified `opkssh` release"
+        }
+      ]
+    }
+  ]
+}

plugins/opkssh/CHANGELOG.md

@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Adds the OPKSSH login type. Termix signs you in with your identity provider in the browser and gets a short-lived SSH certificate from OpenPubkey SSH.

plugins/opkssh/CONTRIBUTING.md

@@ -0,0 +1,18 @@
+# Contributing to OPKSSH
+
+## Development
+
+```bash
+npm run build      # build into dist/
+npm run test       # run this plugin's tests
+npm run typecheck  # type-check this plugin
+npm run validate   # check manifest.json
+npm run format     # format the code with Prettier
+```
+
+## Settings
+
+### Admin
+
+- **Redirect URI:** register `<base URL>/plugin-api/opkssh/callback` with every identity provider in your OPKSSH config
+- **Use the old redirect URI:** keep sending the 2.8 URI `<base URL>/host/opkssh-callback`. Upgraded installs keep this on until you turn it off

plugins/opkssh/README.md

@@ -1,40 +1,38 @@
-# OPKSSH
+<div align="center">
 
-Connect to hosts with short-lived SSH certificates from OpenPubkey SSH, after signing in with your identity provider.
+<img src="https://raw.githubusercontent.com/Termix-SSH/Termix/main/public/icon.svg" width="120" height="120" alt="Termix Logo" />
+
+<h1>OPKSSH</h1>
+
+<p>Sign in to your hosts with your identity provider</p>
+
+</div>
+
+<br />
+
+## Overview
+
+OPKSSH lets you connect to hosts with short-lived SSH certificates from [OpenPubkey SSH](https://github.com/openpubkey/opkssh), after signing in with your identity provider.
+
+<br />
 
 ## Features
 
-- Adds the OPKSSH login type to the host editor.
-- Signs you in with your identity provider in the browser and gets a short-lived SSH certificate from [OpenPubkey SSH](https://github.com/openpubkey/opkssh).
-- Keeps the certificate for 24 hours.
+- Adds the OPKSSH auth type to hosts
+- Sign in with your identity provider in the browser
+- Certificates last 24 hours, so you sign in once a day
+- Uses a pinned, checksum verified `opkssh` release
 
-## Setup
+<br />
 
-The config file lives at `<DATA_DIR>/plugins/opkssh/config.yml` and uses the OPKSSH config format. A template is written there the first time someone signs in without one. Installs upgraded from 2.8 have their old `<DATA_DIR>/.opk/config.yml` copied here.
+## Support
 
-`redirect_uris` in that file is the local listener OPKSSH opens on the Termix server. It must be localhost or left out. Register the public callback shown in the admin settings with your identity provider instead.
+To report a bug or request a feature, open a [support ticket](https://github.com/Termix-SSH/Support/issues/new/choose). You need to be logged in to GitHub. Please be as detailed as possible, preferably in English.
 
-### Binary
+For discussions and questions, join the [Discord](https://discord.gg/jVQGdvHDrf) server.
 
-The plugin runs one pinned release of `opkssh` and checks its SHA-256. It looks for the binary in this order:
+<br />
 
-1. `OPKSSH_BUNDLED_DIR/<asset>`, which defaults to `<cwd>/opkssh-bundled`. The Docker image ships it at `/app/opkssh-bundled`, so offline installs never download it.
-2. `<DATA_DIR>/plugins/opkssh/bin/<asset>`, a copy downloaded earlier.
-3. A download from the GitHub release.
+## License
 
-A copy with the wrong checksum is ignored. Set `OPKSSH_VERSION` to use another release, and `OPKSSH_SHA256` to its checksum.
-
-## Settings
-
-### Admin
-
-- Redirect URI: register `<base URL>/plugin-api/opkssh/callback` with your identity provider.
-- Use the old redirect URI: keep sending the 2.8 URI `<base URL>/host/opkssh-callback`. Upgraded installs keep this on until you turn it off.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
+Distributed under the Apache License Version 2.0. See [LICENSE](https://github.com/Termix-SSH/Termix/blob/main/LICENSE) for more information.

plugins/opkssh/manifest.json

@@ -2,16 +2,16 @@
   "id": "opkssh",
   "name": "OPKSSH",
   "version": "1.0.0",
-  "description": "Connect to hosts with short-lived SSH certificates from OpenPubkey SSH, after signing in with your identity provider.",
+  "description": "Connect to hosts with short-lived OpenPubkey SSH certificates after signing in with your identity provider.",
   "author": {
     "name": "Termix"
   },
-  "license": "MIT",
+  "license": "Apache-2.0",
   "repository": "https://github.com/Termix-SSH/Termix",
   "category": "Access & Security",
   "icon": "ShieldCheck",
   "engine": {
-    "termix": ">=2.9.0",
+    "termix": ">=26.10.0",
     "api": "1"
   },
   "capabilities": [

plugins/opkssh/package.json

@@ -7,13 +7,18 @@
     "build": "termix-plugin build",
     "test": "termix-plugin test",
     "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
+    "validate": "termix-plugin validate",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "prepare": "husky || true"
   },
   "dependencies": {
     "js-yaml": "^5.2.3",
     "lucide-react": "^1.33.0"
   },
   "devDependencies": {
+    "@commitlint/cli": "^21.2.2",
+    "@commitlint/config-conventional": "^21.2.0",
     "@termix/plugin-sdk": "^1.0.0",
     "@testing-library/dom": "^10.4.2",
     "@testing-library/react": "^16.3.3",
@@ -21,7 +26,10 @@
     "@types/react": "^19.2.18",
     "@types/react-dom": "^19.2.4",
     "better-sqlite3": "^13.0.3",
+    "husky": "^9.1.7",
     "jsdom": "^30.0.1",
+    "lint-staged": "^17.2.0",
+    "prettier": "3.9.9",
     "vitest": "^4.1.11"
   },
   "peerDependencies": {
@@ -31,5 +39,10 @@
     "express": "^5.2.1",
     "react": "^19.2.8",
     "sonner": "^2.0.8"
+  },
+  "lint-staged": {
+    "*.{ts,tsx,js,jsx,mjs,cjs,json,css,md}": [
+      "prettier --write"
+    ]
   }
 }