chore: update translations and plugin pins

feat: host color and icon columns that sync
feat: list plugin engine ranges for the mobile app
2026-11-04 17:45:24 +00:00 · 2026-10-27 15:16:37 +00:00 · 2026-10-25 11:25:50 -05:00 · 2026-10-25 00:59:04 -05:00 · 2026-10-25 00:53:18 -05:00 · 2026-10-25 00:00:39 -05:00
200 changed files with 352 additions and 39805 deletions
@@ -250,27 +250,6 @@ jobs:
          path: termix_windows_arm64_portable.zip
          retention-days: 30

-      # The same app with every official plugin, for installs without
-      # internet. Built last so nothing above packs the full set, and with
-      # no update files: a full install updates through the normal build and
-      # downloads the plugins it had on.
-      - name: Build Windows x64 full installer
-        if: inputs.artifact_destination != 'none'
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          TERMIX_PLUGIN_PROFILE: full
-        run: |
-          npm run build:plugins
-          npx electron-builder --win nsis --x64 --publish never '-c.nsis.artifactName=termix_windows_x64_full_nsis.${ext}'
-
-      - name: Upload Windows x64 full installer
-        uses: actions/upload-artifact@v7
-        if: hashFiles('release/termix_windows_x64_full_nsis.exe') != '' && inputs.artifact_destination != 'none'
-        with:
-          name: termix_windows_x64_full_nsis
-          path: release/termix_windows_x64_full_nsis.exe
-          retention-days: 30
-
  build-linux:
    runs-on: blacksmith-8vcpu-ubuntu-2404
    if: (inputs.build_type == 'all' || inputs.build_type == 'linux' || inputs.build_type == '') && inputs.artifact_destination != 'submit'
@@ -509,28 +488,6 @@ jobs:
          path: release/com.karmaa.termix.flatpakref
          retention-days: 30

-      # Every official plugin, for installs without internet. No update files.
-      - name: Build Linux x64 full packages
-        if: inputs.artifact_destination != 'none'
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          TERMIX_PLUGIN_PROFILE: full
-        run: |
-          npm run build:plugins
-          npx electron-builder --linux AppImage deb --x64 --publish never \
-            '-c.appImage.artifactName=termix_linux_x64_full_appimage.${ext}' \
-            '-c.deb.artifactName=termix_linux_x64_full_deb.${ext}'
-
-      - name: Upload Linux x64 full packages
-        uses: actions/upload-artifact@v7
-        if: hashFiles('release/termix_linux_x64_full_appimage.AppImage') != '' && inputs.artifact_destination != 'none'
-        with:
-          name: termix_linux_x64_full
-          path: |
-            release/termix_linux_x64_full_appimage.AppImage
-            release/termix_linux_x64_full_deb.deb
-          retention-days: 30
-
  build-macos:
    runs-on: blacksmith-6vcpu-macos-latest
    if: (inputs.build_type == 'macos' || inputs.build_type == 'all') && inputs.artifact_destination != 'submit'
@@ -806,32 +763,6 @@ jobs:

          gh release upload "$RELEASE_TAG" homebrew-generated/termix.rb --repo ${{ github.repository }} --clobber

-      # Every official plugin, for installs without internet. Signed like the
-      # normal DMG, with no update files.
-      - name: Build macOS universal full DMG
-        if: inputs.artifact_destination != 'none'
-        env:
-          ELECTRON_BUILDER_ALLOW_UNRESOLVED_DEPENDENCIES: true
-          APPLE_ID: ${{ secrets.APPLE_ID }}
-          APPLE_ID_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }}
-          APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }}
-          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
-          NODE_OPTIONS: --max-old-space-size=4096
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          TERMIX_PLUGIN_PROFILE: full
-        run: |
-          npm run build:plugins
-          npx electron-builder --mac dmg --universal --publish never \
-            '-c.dmg.artifactName=termix_macos_${arch}_full_dmg.${ext}'
-
-      - name: Upload macOS universal full DMG
-        uses: actions/upload-artifact@v7
-        if: hashFiles('release/termix_macos_universal_full_dmg.dmg') != '' && inputs.artifact_destination != 'none'
-        with:
-          name: termix_macos_universal_full_dmg
-          path: release/termix_macos_universal_full_dmg.dmg
-          retention-days: 30
-
      - name: Clean up keychains
        if: always()
        run: |
@@ -1316,9 +1247,7 @@ jobs:
            --app_identifier "com.karmaa.termix" \
            --skip_metadata false \
            --metadata_path "${{ steps.asc_notes.outputs.metadata_path }}" \
-            --skip_screenshots false \
-            --screenshots_path packaging/appstore/screenshots \
-            --overwrite_screenshots true \
+            --skip_screenshots true \
            --skip_app_version_update false \
            --submit_for_review true \
            --automatic_release true \
@@ -1,37 +1,5 @@
 # Changelog

-## 26.11.1
-
-### Added
-
- Termix actions: plugins can declare what they do once, and it works from the API with permission checks, dry runs, run history and approvals
- API keys can be limited to reading or running actions
-
-### Changed
-
- Host status, import and export, and credential tools now start on for new installs
- Sync now starts on in a new desktop app, so it can link to a server
- The first run plugin picker leaves plugins you did not choose off instead of removing them
-
-### Fixed
-
- The first run plugin picker no longer sets the default layout and themes to Remove. They always stay on
- Alerts with no icon no longer squeeze their text to one word per line
- Password fields with the show button are the same height as the other fields next to them
- The Secure your account setup step no longer shows up empty when no passkey or authenticator plugin is on
-
-## 26.11.0
-
-### Fixed
-
- Saving the database no longer holds up the whole server while it encrypts and writes. A big database is also saved less often by background writes, which fixes slow requests and dropped connections
- The macOS menu bar icon shows the logo instead of an empty shape on multi-architecture builds
- Disabled plugins no longer show update or review buttons, and no longer count as pending updates
- One slow request, like a plugin waiting on an SSH host, no longer shows Server connection lost. The app now checks the server first
- Canceled requests no longer show Server connection lost
- The macOS Window menu has an item to reopen the main window after it is closed
- Hosts with both an SSH key and a password can log in to servers set to AuthenticationMethods publickey,password
-
 ## 26.10.6

 ### Added
@@ -40,30 +8,6 @@
 - Plugins can say how they show in the mobile app
 - The plugin list tells the mobile app which plugin API each plugin needs, so the app can say when it or a plugin needs an update
 - Hosts can have a color and an icon, which sync to the desktop and mobile apps
- A sidebar setting to turn off alternating row colors
- TERMIX_NGINX_TEMPLATE, TERMIX_NGINX_CONF, TERMIX_NGINX_PID and TERMIX_APP_DIR let an install outside Docker, like the Proxmox LXC script, switch nginx to HTTPS when a certificate is added
- Removing a user or role from a shared folder can also remove their access from every host in the folder and its subfolders
- A personal login set once on a folder is used for every host shared with you in it and its subfolders, unless a host has its own
-
-### Changed
-
- body-parser is updated to 2.4.0 for a security fix
-
-### Fixed
-
- The log line for a rejected proxy login now shows the source address, so you can add it to TRUSTED_PROXY_AUTH_TRUSTED_PROXIES
- Deleting your own account now removes all of its data, like an admin delete does, instead of leaving some behind
- An SSH key with a passphrase is unlocked once and kept unlocked in memory for a short time, so connecting to many hosts with it no longer freezes the server for minutes
- A change pushed from one linked desktop or phone now reaches your other linked devices right away, instead of on their next check a few minutes later
- The macOS menu bar icon shows the Termix logo instead of an empty square
- Cmd+1 (Alt+1 on Windows and Linux) and the other number shortcuts pick the open tabs as numbered in the tab bar, not the home tab
- A plugin the app no longer ships and could not download (for example on a locked down network) shows as failed with the reason on the Plugins tab, instead of as installed
- The desktop app no longer shows This layout could not be shown when the layout is asked for before its plugin has finished starting; it tries again
- On the desktop, a plugin installed from the registry that uses core's packages through require (like ACME SSL and axios) starts instead of failing with Cannot find module
- Adding a certificate on an install where Termix cannot manage nginx says what to set instead of only asking for a restart
- A login someone shared with you works on a host shared with you, for personal SSH authentication and when the owner shares SSH authentication
- Lists in plugins (like the AI Assets table) use their full width on narrow screens, keep cells under the right header and no longer overlap rows
- Installing an official plugin from a file works offline: pick the .tmxplug and its .sig from the release together and it installs as official, so plugins like Fleets no longer stop with migration refused. It can also fill in a plugin that was on but could not be downloaded

 ## 26.10.5

@@ -1,6 +1,6 @@
 cask "termix" do
-  version "26.11.0"
-  sha256 "1b873e1315d769f8e416c1690032142efb152d1265c2f078b33f72cec3e6e03e"
+  version "26.10.5"
+  sha256 "808c467c5c34402193c7950ce61df0fa0445782f276348cf31ef235a6427d21c"

  url "https://github.com/Termix-SSH/Termix/releases/download/v#{version}/termix_macos_universal_dmg.dmg"
  name "Termix"
@@ -71,8 +71,8 @@ Plugins add everything else. The official ones ship with Termix, and admins can
 | [Databases](https://github.com/Termix-SSH/Plugin-Databases)                 | Browse and edit MySQL, MariaDB, PostgreSQL and SQLite databases on your hosts from one tab.                                     |
 | [Docker](https://github.com/Termix-SSH/Plugin-Docker)                       | Manage Docker and Podman containers on your hosts over SSH, with logs, stats and a console.                                     |
 | [File Manager](https://github.com/Termix-SSH/Plugin-File-Manager)           | Browse, edit and move files over SFTP, including straight from one server to another.                                           |
-| [Firewall](https://github.com/Termix-SSH/Plugin-Firewall)                   | Manage UFW, firewalld, nftables and iptables rules on your hosts over SSH, with lockout protection.                             |
 | [Fleets](https://github.com/Termix-SSH/Plugin-Fleets)                       | Group hosts into fleets and run commands, package actions and file transfers on all of them at once.                            |
+| [HashiCorp Vault](https://github.com/Termix-SSH/Plugin-Vault)               | Connect to hosts with short-lived SSH certificates signed by HashiCorp Vault.                                                   |
 | [Homepage](https://github.com/Termix-SSH/Plugin-Homepage)                   | A drag and drop widget page for your servers and services, plus service links for the dashboard.                                |
 | [Host Metrics](https://github.com/Termix-SSH/Plugin-Host-Metrics)           | Live CPU, memory, disk, network and GPU stats, plus tools to manage your hosts.                                                 |
 | [Host Status](https://github.com/Termix-SSH/Plugin-Host-Status)             | Shows if each host is online with a dot in the host list, checked by connecting to its port.                                    |
@@ -96,7 +96,6 @@ Plugins add everything else. The official ones ship with Termix, and admins can
 | [Simple Layout](https://github.com/Termix-SSH/Plugin-Simple-Layout)         | A simple Termix layout for small setups with a top bar, a Home screen and only the basics.                                      |
 | [Single sign-on](https://github.com/Termix-SSH/Plugin-SSO)                  | Sign in with any OpenID Connect provider, GitHub or Google.                                                                     |
 | [Snippets](https://github.com/Termix-SSH/Plugin-Snippets)                   | Save the commands you run often and run them in a terminal or on many hosts in one click.                                       |
-| [SSH Certificate Signer](https://github.com/Termix-SSH/Plugin-Vault)        | Connect to hosts with short-lived SSH certificates signed by HashiCorp Vault or OpenBao.                                        |
 | [SSH Terminal](https://github.com/Termix-SSH/Plugin-SSH-Terminal)           | SSH terminal sessions with tabs, split screen, history, macros and a local terminal in the desktop app.                         |
 | [Step CA](https://github.com/Termix-SSH/Plugin-Step-CA)                     | Connect to hosts with short-lived SSH certificates from a smallstep step-ca server.                                             |
 | [Sync](https://github.com/Termix-SSH/Plugin-Sync)                           | Sync the desktop app with one or more servers, and manage other Termix servers as remote sites from a master.                   |
@@ -106,10 +105,9 @@ Plugins add everything else. The official ones ship with Termix, and admins can
 | [TOTP](https://github.com/Termix-SSH/Plugin-TOTP)                           | Two-factor sign in with a code from an authenticator app, with backup codes.                                                    |
 | [Tunnels](https://github.com/Termix-SSH/Plugin-Tunnels)                     | SSH port forwarding that reconnects on its own, plus client tunnels from the desktop app.                                       |
 | [Usage Statistics](https://github.com/Termix-SSH/Plugin-Telemetry)          | Sends a small anonymous daily report so we can see how Termix is used.                                                          |
-| [Wake-on-LAN](https://github.com/Termix-SSH/Plugin-Wake-On-LAN)             | Wake, shut down and track your machines from one power dashboard.                                                               |
+| [Wake-on-LAN](https://github.com/Termix-SSH/Plugin-Wake-On-LAN)             | Wake sleeping machines by sending a Wake-on-LAN packet to their MAC address.                                                    |
 | [Warpgate](https://github.com/Termix-SSH/Plugin-Warpgate)                   | Connect to hosts through a Warpgate SSH bastion.                                                                                |
 | [Web Endpoint](https://github.com/Termix-SSH/Plugin-Web-Endpoint)           | Open a host's web UI inside Termix, directly or over an SSH tunnel.                                                             |
-| [WireGuard](https://github.com/Termix-SSH/Plugin-WireGuard)                 | Install WireGuard on your hosts and manage interfaces, clients and configs from one tab.                                        |
 | [Workspaces](https://github.com/Termix-SSH/Plugin-Workspaces)               | Save your open tabs and split layouts and reopen them in one click.                                                             |

 Want to build your own? Start from the [plugin template](https://github.com/Termix-SSH/Termix-Plugin-Template). Plugins you can install are listed in the [registry](https://github.com/Termix-SSH/Termix-Registry). Turn on the community registry in Plugins, Registries to install plugins made by other people, or add your own registry. See [submitting a plugin](https://docs.termix.site/develop/community-registry) and [hosting your own registry](https://docs.termix.site/develop/registries#host-your-own-registry).
@@ -129,15 +127,15 @@ Want to build your own? Start from the [plugin template](https://github.com/Term
 </tr>
 <tr>
 <td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>Portable | EXE and MSI Installer | Full EXE (all plugins) | Chocolatey</td>
+<td>Portable | EXE and MSI Installer | Chocolatey</td>
 </tr>
 <tr>
 <td align="center"><b>Linux</b> <sub>x64/arm64/armv7l</sub></td>
-<td>Portable | AUR | AppImage | Deb | Full AppImage and Deb (all plugins) | Flatpak</td>
+<td>Portable | AUR | AppImage | Deb | Flatpak</td>
 </tr>
 <tr>
 <td align="center"><b>macOS</b> <sub>Universal/x64/arm64, v12.0+</sub></td>
-<td>Apple App Store | DMG | Full DMG (all plugins) | Homebrew</td>
+<td>Apple App Store | DMG | Homebrew</td>
 </tr>
 <tr>
 <td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
@@ -10,15 +10,15 @@
    {
      "id": "ai",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-AI/releases/download/v1.3.1/ai-1.3.1.tmxplug",
-      "sha256": "dbee8bc101b8584e9e356bc3539787bb534ffc25809cd92c4f5d45d52cad4ce2",
+      "url": "https://github.com/Termix-SSH/Plugin-AI/releases/download/v1.3.0/ai-1.3.0.tmxplug",
+      "sha256": "87ad17324cec6036dc224135fee342250c37413dccb2963f5f6b554d4ab8f5a6",
      "tier": "full"
    },
    {
      "id": "alerts",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-Alerts/releases/download/v1.2.0/alerts-1.2.0.tmxplug",
-      "sha256": "488947482eed0306893c2983f701a0e14c55975ca2a0c4bb0799a40fce9db054",
+      "url": "https://github.com/Termix-SSH/Plugin-Alerts/releases/download/v1.1.0/alerts-1.1.0.tmxplug",
+      "sha256": "a7ce9e20ce3c15f77c15479b4901563adf3c793e24a3aacd7226950491f0434c",
      "tier": "standard",
      "onboarding": {
        "recommended": true,
@@ -42,8 +42,8 @@
    {
      "id": "classic-layout",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-Classic-Layout/releases/download/v1.1.1/classic-layout-1.1.1.tmxplug",
-      "sha256": "2b0cee0c57b21d8017ed833aa923e934b57b908fa68ff395951b4d52e5113e47",
+      "url": "https://github.com/Termix-SSH/Plugin-Classic-Layout/releases/download/v1.0.2/classic-layout-1.0.2.tmxplug",
+      "sha256": "cf54f9b2e81c33b7e58cd3a21e203805f08ba37b3bc78412a08eb21b9fef8f14",
      "tier": "minimal",
      "defaultLook": true
    },
@@ -67,24 +67,20 @@
      "source": "tmxplug",
      "url": "https://github.com/Termix-SSH/Plugin-Credential-Tools/releases/download/v1.0.0/credential-tools-1.0.0.tmxplug",
      "sha256": "413eff710b5c832a2575a890bbab1c90d28ea55f10cd7a7b94b851d51dd77dce",
-      "tier": "standard",
-      "onboarding": {
-        "recommended": true,
-        "consent": false
-      }
+      "tier": "standard"
    },
    {
      "id": "databases",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-Databases/releases/download/v1.1.1/databases-1.1.1.tmxplug",
-      "sha256": "316e26c682f5b07b0809e87f8ea94e2b819a9c46fc0e22611b24069c804312d0",
+      "url": "https://github.com/Termix-SSH/Plugin-Databases/releases/download/v1.1.0/databases-1.1.0.tmxplug",
+      "sha256": "4d9504cde705688a6f1f7706139d4e4c49b2276eccc67538fdee8251f29920b8",
      "tier": "full"
    },
    {
      "id": "docker",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-Docker/releases/download/v1.2.3/docker-1.2.3.tmxplug",
-      "sha256": "c997d5d1a751703facef544e901fb52e93fb79d5dc1c59496d4cb624210bbe14",
+      "url": "https://github.com/Termix-SSH/Plugin-Docker/releases/download/v1.2.1/docker-1.2.1.tmxplug",
+      "sha256": "b2ca797465d88cfb549a04c3f0161708669def22a5ca73cb107879847c2db8ff",
      "tier": "standard",
      "onboarding": {
        "recommended": true,
@@ -94,8 +90,8 @@
    {
      "id": "file-manager",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-File-Manager/releases/download/v1.1.3/file-manager-1.1.3.tmxplug",
-      "sha256": "b17315011c06db2223f04dac4606da505249dd8f2fec8aa24f1322c4dfd4d6ca",
+      "url": "https://github.com/Termix-SSH/Plugin-File-Manager/releases/download/v1.1.1/file-manager-1.1.1.tmxplug",
+      "sha256": "ebba0b7d14facb3354f22a00e059e9f5a69e233458cb24985bf4ed5e5f8d2abd",
      "tier": "standard",
      "onboarding": {
        "recommended": true,
@@ -105,8 +101,8 @@
    {
      "id": "fleets",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-Fleets/releases/download/v1.1.0/fleets-1.1.0.tmxplug",
-      "sha256": "5e0218c6145524ae8776b8fcbae043749c893d9b04fb67a9b3fe262ff76c0573",
+      "url": "https://github.com/Termix-SSH/Plugin-Fleets/releases/download/v1.0.2/fleets-1.0.2.tmxplug",
+      "sha256": "50dab38e1c6c95fdb4d0544ce50cdf84dae84789e64aa34ea9d04fdac3a38c59",
      "tier": "full"
    },
    {
@@ -119,8 +115,8 @@
    {
      "id": "host-metrics",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-Host-Metrics/releases/download/v1.3.1/host-metrics-1.3.1.tmxplug",
-      "sha256": "3c14a72b3efa2a8b0010229acba64a6a4098e8c2e35d5a01cbc3cb731df39fb5",
+      "url": "https://github.com/Termix-SSH/Plugin-Host-Metrics/releases/download/v1.2.0/host-metrics-1.2.0.tmxplug",
+      "sha256": "8522cd23b558c3209821cee6d177daeb80f439b8ff652c577c5e4955315cc7a3",
      "tier": "standard",
      "onboarding": {
        "recommended": true,
@@ -132,11 +128,7 @@
      "source": "tmxplug",
      "url": "https://github.com/Termix-SSH/Plugin-Host-Status/releases/download/v1.0.0/host-status-1.0.0.tmxplug",
      "sha256": "1ba62577dc7373a2a2787bab7efdb89b544a30a8003b1de91ce51f372fc4f170",
-      "tier": "standard",
-      "onboarding": {
-        "recommended": true,
-        "consent": false
-      }
+      "tier": "standard"
    },
    {
      "id": "hosts-config",
@@ -148,13 +140,9 @@
    {
      "id": "import-export",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-Import-Export/releases/download/v1.0.1/import-export-1.0.1.tmxplug",
-      "sha256": "d8f2f865e1e6b226f4fe38501bf69b752f47a643bed1d9d127181083e27da2f0",
-      "tier": "standard",
-      "onboarding": {
-        "recommended": true,
-        "consent": false
-      }
+      "url": "https://github.com/Termix-SSH/Plugin-Import-Export/releases/download/v1.0.0/import-export-1.0.0.tmxplug",
+      "sha256": "6670b6c147e81eed0ddfd249f9a7c9564f1ab50e45f2771161d2e30c47f6fd58",
+      "tier": "standard"
    },
    {
      "id": "kubernetes",
@@ -194,15 +182,15 @@
    {
      "id": "proxmox",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-Proxmox/releases/download/v1.2.1/proxmox-1.2.1.tmxplug",
-      "sha256": "d5a6e9cd50756785ede6aec351e2de08927816f71e54f3162c52331e0a804d74",
+      "url": "https://github.com/Termix-SSH/Plugin-Proxmox/releases/download/v1.1.0/proxmox-1.1.0.tmxplug",
+      "sha256": "8937d239ad40033d69fba59085fe8896ee25c61951c21f66ff98531fd4c63cbf",
      "tier": "full"
    },
    {
      "id": "remote-desktop",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-Remote-Desktop/releases/download/v1.3.1/remote-desktop-1.3.1.tmxplug",
-      "sha256": "41483f8d64995206e0199cca7d37033e5b1f1194725da3525e1b8afa1b4e09a9",
+      "url": "https://github.com/Termix-SSH/Plugin-Remote-Desktop/releases/download/v1.2.1/remote-desktop-1.2.1.tmxplug",
+      "sha256": "ad244f31016f0ea5df5c303bf6f48af35c6c8e52b12098d381c8296626b73de7",
      "tier": "standard",
      "onboarding": {
        "recommended": true,
@@ -212,8 +200,8 @@
    {
      "id": "reverse-proxy",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-Reverse-Proxy/releases/download/v1.1.1/reverse-proxy-1.1.1.tmxplug",
-      "sha256": "f5e0089ca5eae1254f21ce18b222e70eb2beeae3bd874c2abc4faa1a68d3e47a",
+      "url": "https://github.com/Termix-SSH/Plugin-Reverse-Proxy/releases/download/v1.1.0/reverse-proxy-1.1.0.tmxplug",
+      "sha256": "c8a9851da7ca6291c1f47cf6ab235da5057455a86b4ed0dc1c1a3026afb30aa7",
      "tier": "full"
    },
    {
@@ -226,8 +214,8 @@
    {
      "id": "secret-sources",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-Secret-Sources/releases/download/v1.1.1/secret-sources-1.1.1.tmxplug",
-      "sha256": "2211ce2dac6355db49590532dfc339dc44df9cf14008157b420c7d4533d669ee",
+      "url": "https://github.com/Termix-SSH/Plugin-Secret-Sources/releases/download/v1.0.2/secret-sources-1.0.2.tmxplug",
+      "sha256": "82e2b1e95b0837dd3e5fee277be4eea2d1ce68567b0e204941c48150f415d134",
      "tier": "full"
    },
    {
@@ -244,15 +232,15 @@
    {
      "id": "service-manager",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-Service-Manager/releases/download/v1.1.1/service-manager-1.1.1.tmxplug",
-      "sha256": "5731a04336d341a330416cba7b7999f0d8e6215752eabbf978ed58c4543c5036",
+      "url": "https://github.com/Termix-SSH/Plugin-Service-Manager/releases/download/v1.1.0/service-manager-1.1.0.tmxplug",
+      "sha256": "82b1c70abd97ed535f217535c667fe6c48e5e01e2bf8037a89b58b80d35206bf",
      "tier": "full"
    },
    {
      "id": "session-recording",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-Session-Recording/releases/download/v1.1.1/session-recording-1.1.1.tmxplug",
-      "sha256": "8e77087f98227ac37a8610dcc5380ad65162a58aebd9174a6c966d5a16b16c9e",
+      "url": "https://github.com/Termix-SSH/Plugin-Session-Recording/releases/download/v1.1.0/session-recording-1.1.0.tmxplug",
+      "sha256": "31cd78d67e061242f8776849a2fae5f84ab48c7c765d487b32c5e1693c54b46a",
      "tier": "full"
    },
    {
@@ -272,8 +260,8 @@
    {
      "id": "snippets",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-Snippets/releases/download/v1.2.0/snippets-1.2.0.tmxplug",
-      "sha256": "a72c0e1f38e49cf86ed8993b6913a6fbbdad7814ae132d5186c097ee3ea09bc3",
+      "url": "https://github.com/Termix-SSH/Plugin-Snippets/releases/download/v1.1.0/snippets-1.1.0.tmxplug",
+      "sha256": "e2d7d1ebe5bdf2986ffb4961ac6f6d32b392b02c30a64a333a7eeb2ce6a46bb3",
      "tier": "standard",
      "onboarding": {
        "recommended": true,
@@ -283,8 +271,8 @@
    {
      "id": "ssh-terminal",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-SSH-Terminal/releases/download/v1.3.0/ssh-terminal-1.3.0.tmxplug",
-      "sha256": "ad39449f1e60724a9f84451e1190982e5d3ecd17e1751ec09a3b21c228e6dd5e",
+      "url": "https://github.com/Termix-SSH/Plugin-SSH-Terminal/releases/download/v1.1.1/ssh-terminal-1.1.1.tmxplug",
+      "sha256": "5cfb381a2de10b7a6fab108d79645bb1e6e7316fb5e4150c4529a3e76a2193d8",
      "tier": "standard",
      "onboarding": {
        "recommended": true,
@@ -294,13 +282,15 @@
    {
      "id": "sso",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-SSO/releases/download/v1.0.5/sso-1.0.5.tmxplug",
-      "sha256": "c1353d17fd25c1f503528c2a64a31ef14a638d9845c1d6cd70bb540e0321d41c",
+      "url": "https://github.com/Termix-SSH/Plugin-SSO/releases/download/v1.0.4/sso-1.0.4.tmxplug",
+      "sha256": "2aad33177085fbc92fe06cd007facffbfc8f42f9c9fa688ad5f37d68f62093d9",
      "tier": "standard",
      "onboarding": {
        "recommended": false,
        "consent": false,
-        "enabledByEnv": ["OIDC_CLIENT_ID"]
+        "enabledByEnv": [
+          "OIDC_CLIENT_ID"
+        ]
      }
    },
    {
@@ -313,13 +303,9 @@
    {
      "id": "sync",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-Sync/releases/download/v1.1.0/sync-1.1.0.tmxplug",
-      "sha256": "9023d547f0e0bcef582c6ba7b7a8ab2ef68d8d0b973dde17d9e8c84d92b6429e",
-      "tier": "standard",
-      "onboarding": {
-        "recommended": "desktop",
-        "consent": false
-      }
+      "url": "https://github.com/Termix-SSH/Plugin-Sync/releases/download/v1.0.1/sync-1.0.1.tmxplug",
+      "sha256": "66a301fd04fb8d2a3ece18dfb230069cf78e1138ee78941dc511dfbd8ee4f91e",
+      "tier": "standard"
    },
    {
      "id": "tailscale",
@@ -367,8 +353,8 @@
    {
      "id": "tunnels",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-Tunnels/releases/download/v1.2.3/tunnels-1.2.3.tmxplug",
-      "sha256": "5a23953ee19b2951bb895e033d2099b8f6d5abc0121253ef3da25328134984ad",
+      "url": "https://github.com/Termix-SSH/Plugin-Tunnels/releases/download/v1.2.1/tunnels-1.2.1.tmxplug",
+      "sha256": "2871a8d31854e1a31416c4afe5839099a4c489e34d9d31573659f73b2515f159",
      "tier": "standard",
      "onboarding": {
        "recommended": true,
@@ -406,8 +392,8 @@
    {
      "id": "webauthn",
      "source": "tmxplug",
-      "url": "https://github.com/Termix-SSH/Plugin-WebAuthn/releases/download/v1.2.0/webauthn-1.2.0.tmxplug",
-      "sha256": "4e7e06d05a17b6e474fdb0d45c8fc320f2ea89375bda440f824636cc393d4615",
+      "url": "https://github.com/Termix-SSH/Plugin-WebAuthn/releases/download/v1.1.0/webauthn-1.1.0.tmxplug",
+      "sha256": "83a61a530db0273f9fef2080d6aa027a82ef8374fb4e0f158a8559a2770299de",
      "tier": "standard",
      "onboarding": {
        "recommended": true,
@@ -276,15 +276,6 @@ http {
            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
        }

-        location ~ ^/operations(/.*)?$ {
-            proxy_pass http://127.0.0.1:30001;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-        }
-
        location ~ ^/plugins(/.*)?$ {
            proxy_pass http://127.0.0.1:30001;
            proxy_http_version 1.1;
@@ -245,15 +245,6 @@ http {
            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
        }

-        location ~ ^/operations(/.*)?$ {
-            proxy_pass http://127.0.0.1:30001;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-        }
-
        location ~ ^/plugins(/.*)?$ {
            proxy_pass http://127.0.0.1:30001;
            proxy_http_version 1.1;
@@ -1,14 +0,0 @@
-CREATE TABLE `shared_folder_auth_overrides` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`folder` varchar(255) NOT NULL,
-	`protocol` varchar(255) NOT NULL DEFAULT 'ssh',
-	`credential_id` int NOT NULL,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `shared_folder_auth_overrides_id` PRIMARY KEY(`id`),
-	CONSTRAINT `shared_folder_auth_overrides_user_folder_protocol_unique` UNIQUE(`user_id`,`folder`,`protocol`)
-);
--> statement-breakpoint
-ALTER TABLE `shared_folder_auth_overrides` ADD CONSTRAINT `shared_folder_auth_overrides_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `shared_folder_auth_overrides` ADD CONSTRAINT `shared_folder_auth_overrides_credential_id_ssh_credentials_id_fk` FOREIGN KEY (`credential_id`) REFERENCES `ssh_credentials`(`id`) ON DELETE cascade ON UPDATE no action;
@@ -1,70 +0,0 @@
-CREATE TABLE `operation_approvals` (
-	`id` varchar(255) NOT NULL,
-	`run_id` varchar(255) NOT NULL,
-	`requested_by` text,
-	`reason` text,
-	`allow_self` boolean NOT NULL DEFAULT false,
-	`status` varchar(255) NOT NULL,
-	`decided_by` text,
-	`comment` text,
-	`created_at` text NOT NULL,
-	`expires_at` varchar(255) NOT NULL,
-	`decided_at` text,
-	CONSTRAINT `operation_approvals_id` PRIMARY KEY(`id`)
-);
--> statement-breakpoint
-CREATE TABLE `operation_events` (
-	`id` varchar(255) NOT NULL,
-	`event_id` text NOT NULL,
-	`plugin_id` text NOT NULL,
-	`host_id` int,
-	`severity` text,
-	`payload` text,
-	`run_id` text,
-	`created_at` varchar(255) NOT NULL,
-	CONSTRAINT `operation_events_id` PRIMARY KEY(`id`)
-);
--> statement-breakpoint
-CREATE TABLE `operation_runs` (
-	`id` varchar(255) NOT NULL,
-	`action_id` text NOT NULL,
-	`action_version` int NOT NULL DEFAULT 1,
-	`plugin_id` text NOT NULL,
-	`plugin_version` text NOT NULL,
-	`user_id` varchar(255),
-	`username` text NOT NULL,
-	`origin` text NOT NULL,
-	`host_id` int,
-	`host_name` text,
-	`batch_id` varchar(255),
-	`dry_run` boolean NOT NULL DEFAULT false,
-	`risk` text NOT NULL,
-	`status` varchar(255) NOT NULL,
-	`summary` text,
-	`changed` boolean,
-	`input` text,
-	`sealed_input` text,
-	`output` text,
-	`undo_input` text,
-	`error` text,
-	`error_code` text,
-	`undo_of` text,
-	`idempotency_key` text,
-	`created_at` varchar(255) NOT NULL,
-	`started_at` text,
-	`finished_at` text,
-	CONSTRAINT `operation_runs_id` PRIMARY KEY(`id`)
-);
--> statement-breakpoint
-ALTER TABLE `api_keys` ADD `scopes` text;--> statement-breakpoint
-ALTER TABLE `operation_approvals` ADD CONSTRAINT `operation_approvals_run_id_operation_runs_id_fk` FOREIGN KEY (`run_id`) REFERENCES `operation_runs`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `operation_runs` ADD CONSTRAINT `operation_runs_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-CREATE INDEX `idx_operation_approvals_status` ON `operation_approvals` (`status`,`expires_at`);--> statement-breakpoint
-CREATE INDEX `idx_operation_approvals_run` ON `operation_approvals` (`run_id`);--> statement-breakpoint
-CREATE INDEX `idx_operation_events_created` ON `operation_events` (`created_at`);--> statement-breakpoint
-CREATE INDEX `idx_operation_events_host_created` ON `operation_events` (`host_id`,`created_at`);--> statement-breakpoint
-CREATE INDEX `idx_operation_runs_created` ON `operation_runs` (`created_at`);--> statement-breakpoint
-CREATE INDEX `idx_operation_runs_user_created` ON `operation_runs` (`user_id`,`created_at`);--> statement-breakpoint
-CREATE INDEX `idx_operation_runs_host_created` ON `operation_runs` (`host_id`,`created_at`);--> statement-breakpoint
-CREATE INDEX `idx_operation_runs_status` ON `operation_runs` (`status`);--> statement-breakpoint
-CREATE INDEX `idx_operation_runs_batch` ON `operation_runs` (`batch_id`);
@@ -540,20 +540,6 @@
      "when": 1792945361809,
      "tag": "0076_host_color_icon",
      "breakpoints": true
-    },
-    {
-      "idx": 77,
-      "version": "5",
-      "when": 1793304929772,
-      "tag": "0077_shared_folder_auth_overrides",
-      "breakpoints": true
-    },
-    {
-      "idx": 78,
-      "version": "5",
-      "when": 1793765383557,
-      "tag": "0078_sweet_king_cobra",
-      "breakpoints": true
    }
  ]
 }
@@ -1,13 +0,0 @@
-CREATE TABLE "shared_folder_auth_overrides" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"folder" varchar(255) NOT NULL,
-	"protocol" varchar(255) DEFAULT 'ssh' NOT NULL,
-	"credential_id" integer NOT NULL,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
--> statement-breakpoint
-ALTER TABLE "shared_folder_auth_overrides" ADD CONSTRAINT "shared_folder_auth_overrides_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "shared_folder_auth_overrides" ADD CONSTRAINT "shared_folder_auth_overrides_credential_id_ssh_credentials_id_fk" FOREIGN KEY ("credential_id") REFERENCES "public"."ssh_credentials"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-CREATE UNIQUE INDEX "shared_folder_auth_overrides_user_folder_protocol_unique" ON "shared_folder_auth_overrides" USING btree ("user_id","folder","protocol");
@@ -1,67 +0,0 @@
-CREATE TABLE "operation_approvals" (
-	"id" varchar(255) PRIMARY KEY NOT NULL,
-	"run_id" varchar(255) NOT NULL,
-	"requested_by" text,
-	"reason" text,
-	"allow_self" boolean DEFAULT false NOT NULL,
-	"status" varchar(255) NOT NULL,
-	"decided_by" text,
-	"comment" text,
-	"created_at" text NOT NULL,
-	"expires_at" varchar(255) NOT NULL,
-	"decided_at" text
-);
--> statement-breakpoint
-CREATE TABLE "operation_events" (
-	"id" varchar(255) PRIMARY KEY NOT NULL,
-	"event_id" text NOT NULL,
-	"plugin_id" text NOT NULL,
-	"host_id" integer,
-	"severity" text,
-	"payload" text,
-	"run_id" text,
-	"created_at" varchar(255) NOT NULL
-);
--> statement-breakpoint
-CREATE TABLE "operation_runs" (
-	"id" varchar(255) PRIMARY KEY NOT NULL,
-	"action_id" text NOT NULL,
-	"action_version" integer DEFAULT 1 NOT NULL,
-	"plugin_id" text NOT NULL,
-	"plugin_version" text NOT NULL,
-	"user_id" varchar(255),
-	"username" text NOT NULL,
-	"origin" text NOT NULL,
-	"host_id" integer,
-	"host_name" text,
-	"batch_id" varchar(255),
-	"dry_run" boolean DEFAULT false NOT NULL,
-	"risk" text NOT NULL,
-	"status" varchar(255) NOT NULL,
-	"summary" text,
-	"changed" boolean,
-	"input" text,
-	"sealed_input" text,
-	"output" text,
-	"undo_input" text,
-	"error" text,
-	"error_code" text,
-	"undo_of" text,
-	"idempotency_key" text,
-	"created_at" varchar(255) NOT NULL,
-	"started_at" text,
-	"finished_at" text
-);
--> statement-breakpoint
-ALTER TABLE "api_keys" ADD COLUMN "scopes" text;--> statement-breakpoint
-ALTER TABLE "operation_approvals" ADD CONSTRAINT "operation_approvals_run_id_operation_runs_id_fk" FOREIGN KEY ("run_id") REFERENCES "public"."operation_runs"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "operation_runs" ADD CONSTRAINT "operation_runs_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-CREATE INDEX "idx_operation_approvals_status" ON "operation_approvals" USING btree ("status","expires_at");--> statement-breakpoint
-CREATE INDEX "idx_operation_approvals_run" ON "operation_approvals" USING btree ("run_id");--> statement-breakpoint
-CREATE INDEX "idx_operation_events_created" ON "operation_events" USING btree ("created_at");--> statement-breakpoint
-CREATE INDEX "idx_operation_events_host_created" ON "operation_events" USING btree ("host_id","created_at");--> statement-breakpoint
-CREATE INDEX "idx_operation_runs_created" ON "operation_runs" USING btree ("created_at");--> statement-breakpoint
-CREATE INDEX "idx_operation_runs_user_created" ON "operation_runs" USING btree ("user_id","created_at");--> statement-breakpoint
-CREATE INDEX "idx_operation_runs_host_created" ON "operation_runs" USING btree ("host_id","created_at");--> statement-breakpoint
-CREATE INDEX "idx_operation_runs_status" ON "operation_runs" USING btree ("status");--> statement-breakpoint
-CREATE INDEX "idx_operation_runs_batch" ON "operation_runs" USING btree ("batch_id");
@@ -540,20 +540,6 @@
      "when": 1792945360507,
      "tag": "0076_host_color_icon",
      "breakpoints": true
-    },
-    {
-      "idx": 77,
-      "version": "7",
-      "when": 1793304928399,
-      "tag": "0077_shared_folder_auth_overrides",
-      "breakpoints": true
-    },
-    {
-      "idx": 78,
-      "version": "7",
-      "when": 1793765382955,
-      "tag": "0078_clean_living_mummy",
-      "breakpoints": true
    }
  ]
 }
@@ -1,13 +0,0 @@
-CREATE TABLE `shared_folder_auth_overrides` (
-	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
-	`user_id` text NOT NULL,
-	`folder` text NOT NULL,
-	`protocol` text DEFAULT 'ssh' NOT NULL,
-	`credential_id` integer NOT NULL,
-	`created_at` text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	`updated_at` text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE cascade,
-	FOREIGN KEY (`credential_id`) REFERENCES `ssh_credentials`(`id`) ON UPDATE no action ON DELETE cascade
-);
--> statement-breakpoint
-CREATE UNIQUE INDEX `shared_folder_auth_overrides_user_folder_protocol_unique` ON `shared_folder_auth_overrides` (`user_id`,`folder`,`protocol`);
@@ -1,67 +0,0 @@
-CREATE TABLE `operation_approvals` (
-	`id` text PRIMARY KEY NOT NULL,
-	`run_id` text NOT NULL,
-	`requested_by` text,
-	`reason` text,
-	`allow_self` integer DEFAULT false NOT NULL,
-	`status` text NOT NULL,
-	`decided_by` text,
-	`comment` text,
-	`created_at` text NOT NULL,
-	`expires_at` text NOT NULL,
-	`decided_at` text,
-	FOREIGN KEY (`run_id`) REFERENCES `operation_runs`(`id`) ON UPDATE no action ON DELETE cascade
-);
--> statement-breakpoint
-CREATE INDEX `idx_operation_approvals_status` ON `operation_approvals` (`status`,`expires_at`);--> statement-breakpoint
-CREATE INDEX `idx_operation_approvals_run` ON `operation_approvals` (`run_id`);--> statement-breakpoint
-CREATE TABLE `operation_events` (
-	`id` text PRIMARY KEY NOT NULL,
-	`event_id` text NOT NULL,
-	`plugin_id` text NOT NULL,
-	`host_id` integer,
-	`severity` text,
-	`payload` text,
-	`run_id` text,
-	`created_at` text NOT NULL
-);
--> statement-breakpoint
-CREATE INDEX `idx_operation_events_created` ON `operation_events` (`created_at`);--> statement-breakpoint
-CREATE INDEX `idx_operation_events_host_created` ON `operation_events` (`host_id`,`created_at`);--> statement-breakpoint
-CREATE TABLE `operation_runs` (
-	`id` text PRIMARY KEY NOT NULL,
-	`action_id` text NOT NULL,
-	`action_version` integer DEFAULT 1 NOT NULL,
-	`plugin_id` text NOT NULL,
-	`plugin_version` text NOT NULL,
-	`user_id` text,
-	`username` text NOT NULL,
-	`origin` text NOT NULL,
-	`host_id` integer,
-	`host_name` text,
-	`batch_id` text,
-	`dry_run` integer DEFAULT false NOT NULL,
-	`risk` text NOT NULL,
-	`status` text NOT NULL,
-	`summary` text,
-	`changed` integer,
-	`input` text,
-	`sealed_input` text,
-	`output` text,
-	`undo_input` text,
-	`error` text,
-	`error_code` text,
-	`undo_of` text,
-	`idempotency_key` text,
-	`created_at` text NOT NULL,
-	`started_at` text,
-	`finished_at` text,
-	FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE set null
-);
--> statement-breakpoint
-CREATE INDEX `idx_operation_runs_created` ON `operation_runs` (`created_at`);--> statement-breakpoint
-CREATE INDEX `idx_operation_runs_user_created` ON `operation_runs` (`user_id`,`created_at`);--> statement-breakpoint
-CREATE INDEX `idx_operation_runs_host_created` ON `operation_runs` (`host_id`,`created_at`);--> statement-breakpoint
-CREATE INDEX `idx_operation_runs_status` ON `operation_runs` (`status`);--> statement-breakpoint
-CREATE INDEX `idx_operation_runs_batch` ON `operation_runs` (`batch_id`);--> statement-breakpoint
-ALTER TABLE `api_keys` ADD `scopes` text;
@@ -505,20 +505,6 @@
      "when": 1792945434651,
      "tag": "0071_host_color_icon",
      "breakpoints": true
-    },
-    {
-      "idx": 72,
-      "version": "6",
-      "when": 1793304926942,
-      "tag": "0072_shared_folder_auth_overrides",
-      "breakpoints": true
-    },
-    {
-      "idx": 73,
-      "version": "6",
-      "when": 1793765382283,
-      "tag": "0073_dazzling_amazoness",
-      "breakpoints": true
    }
  ]
 }
@@ -1235,14 +1235,19 @@ function createTray() {
    // use the unpacked path so the OS sees a real file.
    const publicRoot = isDev
      ? path.join(appRoot, "public")
-      : path.join(getUnpackedAppRoot(appRoot), "public");
+      : path.join(
+          appRoot.replace(
+            /app(-[a-z0-9]+)?\.asar(?!\.unpacked)/,
+            "app.asar.unpacked",
+          ),
+          "public",
+        );

    let trayIcon;
    if (process.platform === "darwin") {
      const iconPath = path.join(publicRoot, "icons", "16x16.png");
-      // The logo is full color on a solid tile. As a template image macOS
-      // keeps only its outline, which showed as an empty square.
      trayIcon = nativeImage.createFromPath(iconPath);
+      trayIcon.setTemplateImage(true);
    } else if (process.platform === "win32") {
      trayIcon = path.join(publicRoot, "icon.ico");
    } else {
@@ -2021,19 +2026,6 @@ function createMenu() {
          { type: "separator" },
          { role: "front" },
          { type: "separator" },
-          {
-            label: app.name,
-            accelerator: "CmdOrCtrl+0",
-            click: () => {
-              if (mainWindow && !mainWindow.isDestroyed()) {
-                if (mainWindow.isMinimized()) mainWindow.restore();
-                mainWindow.show();
-                mainWindow.focus();
-              } else {
-                createWindow();
-              }
-            },
-          },
          { role: "window" },
        ],
      },
@@ -83,30 +83,6 @@
      "default": "8443",
      "description": "Port for HTTPS."
    },
-    {
-      "name": "TERMIX_NGINX_TEMPLATE",
-      "group": "https",
-      "default": "/app/nginx/nginx-https.conf.template",
-      "description": "The HTTPS nginx template Termix renders when a certificate is added. Set it on an install outside Docker."
-    },
-    {
-      "name": "TERMIX_NGINX_CONF",
-      "group": "https",
-      "default": "/tmp/nginx/nginx.conf",
-      "description": "Where Termix writes the rendered nginx config before it reloads nginx."
-    },
-    {
-      "name": "TERMIX_NGINX_PID",
-      "group": "https",
-      "default": "/tmp/nginx/nginx.pid",
-      "description": "The nginx pid file. Termix only reloads nginx when it exists."
-    },
-    {
-      "name": "TERMIX_APP_DIR",
-      "group": "https",
-      "default": "/app",
-      "description": "Where Termix is installed, used in place of /app in the nginx template."
-    },
    {
      "name": "SSL_CERT_PATH",
      "group": "https",
@@ -1,12 +1,12 @@
 {
  "name": "termix",
-  "version": "26.11.0",
+  "version": "26.10.6",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "termix",
-      "version": "26.11.0",
+      "version": "26.10.6",
      "hasInstallScript": true,
      "workspaces": [
        "packages/*"
@@ -19,7 +19,7 @@
        "axios": "^1.19.0",
        "bcryptjs": "^3.0.3",
        "better-sqlite3": "^13.0.3",
-        "body-parser": "^2.4.0",
+        "body-parser": "^2.3.0",
        "chalk": "^6.0.0",
        "compression": "^1.8.2",
        "cookie-parser": "^1.4.7",
@@ -7470,18 +7470,18 @@
      "license": "MIT"
    },
    "node_modules/body-parser": {
-      "version": "2.4.0",
-      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-2.4.0.tgz",
-      "integrity": "sha512-Ifk1KcLrxaGt1occQagQNFNNOqRt1LFuehEnHHzB8Z6cRgIxRU1TBaiIsUiCdA+gy5PL7Y1IX31DNKkRmxtXjQ==",
+      "version": "2.3.0",
+      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-2.3.0.tgz",
+      "integrity": "sha512-2cGmJupaNgg+QUwVLAucDuWuoMZ6EX9iHDRswZ5lsNYEmwPaRknMPCLZz07yTzVq/83p4o/wzbDZbBrTvGGTIw==",
      "license": "MIT",
      "dependencies": {
        "bytes": "^3.1.2",
-        "content-type": "^2.1.0",
+        "content-type": "^2.0.0",
        "debug": "^4.4.3",
        "http-errors": "^2.0.1",
-        "iconv-lite": "^0.7.3",
+        "iconv-lite": "^0.7.2",
        "on-finished": "^2.4.1",
-        "qs": "^6.16.1",
+        "qs": "^6.15.2",
        "raw-body": "^3.0.2",
        "type-is": "^2.1.0"
      },
@@ -15058,7 +15058,7 @@
    },
    "packages/plugin-sdk": {
      "name": "@termix-ssh/plugin-sdk",
-      "version": "1.0.22",
+      "version": "1.0.13",
      "license": "Apache-2.0",
      "dependencies": {
        "@deadendjs/swagger-jsdoc": "^8.1.2",
@@ -4,7 +4,7 @@
  "workspaces": [
    "packages/*"
  ],
-  "version": "26.11.0",
+  "version": "26.10.6",
  "description": "Self-hosted, plugin-based server management.",
  "author": "Karmaa",
  "main": "electron/main.cjs",
@@ -55,7 +55,7 @@
    "axios": "^1.19.0",
    "bcryptjs": "^3.0.3",
    "better-sqlite3": "^13.0.3",
-    "body-parser": "^2.4.0",
+    "body-parser": "^2.3.0",
    "chalk": "^6.0.0",
    "compression": "^1.8.2",
    "cookie-parser": "^1.4.7",
@@ -1,16 +1,5 @@
 # Changelog

-## 1.0.23
-
-Plugin API 1.14.0.
-
-### Added
-
- `contributes.operations` declares a plugin's actions, events, resources and signals, so Automations, Fleets, the assistant, the CLI, the phone app and the command palette can find them with no wiring
- `ctx.operations` registers handlers, runs other plugins' declared actions, emits events and provides approval rules, with the new `operations:provide`, `operations:invoke` and `operations:approve` capabilities
- `@termix-ssh/plugin-sdk/operations` has the types, input checks, redaction and JSON Schema for declared actions
- `contributes.hostSections` declares cards for the host page
-
 ## 1.0.22

 Plugin API 1.13.0.
@@ -20,17 +9,10 @@ Plugin API 1.13.0.
 - `contributes.mobile` in the manifest says how a plugin shows in the Termix mobile app: `webview`, `native` or `none`, with an optional mobile bundle, screen sizes, views and a note
 - `termix-plugin build` bundles `src/mobile` into the `contributes.mobile.entry` file, and `validate` checks that it exists
 - `@termix-ssh/plugin-sdk/frame-host` runs one plugin view outside the shell, with core's bridge, registries and CSS, so the mobile app can show `webview` plugins
- SSH transport providers get the host's owner, sync id, connection origin and local only flag in `claims` and `open`, and core's SSH relay takes a `syncId` instead of a host id
- `ctx.sync.host.entities.idsOf` maps sync ids to the local ids of the user's own rows of one type
- Rail items take `useStatus` for a small ok, warning or error dot on the icon
- `shell.editHost(hostId)` opens the editor of a saved host
- A sync entity can be read only with `load`, `write` and `erase`, so a plugin can sync rows a user does not own, like a shared library, down to linked desktops
- `getFolderAuthOverride` and `setFolderAuthOverride` in `@termix-ssh/plugin-sdk/ui` read and set a user's own login for the shared hosts in a folder

 ### Fixed

 - `@termix-ssh/plugin-sdk/ui` is built in production mode, so outside Termix it no longer sends requests to the Vite dev server path
- `execCommand` buffers output and decodes it once as strict UTF-8 with a GBK fallback, exposed as `decodeCommandOutput`, so messages from a Windows host on a legacy codepage are readable instead of � characters

 ## 1.0.21

@@ -1,6 +1,6 @@
 # Termix plugin guide

-SDK 1.0.23 | Plugin API 1.14.0
+SDK 1.0.22 | Plugin API 1.13.0

 This guide is for anyone, person or AI coding tool, building a Termix plugin. It ships inside
 `@termix-ssh/plugin-sdk`, so the copy in your `node_modules` always matches the SDK you have installed.
@@ -346,7 +346,7 @@ router.post("/notes", async (req, res) => {
 - `ctx.rbac.require("manage")` on a single route, `await ctx.rbac.has("manage")` in code. A full id like
  `hosts.edit` checks a core permission.
 - Host access: `ctx.hosts.checkAccess(hostId, "connect" | "view" | "edit" | "manage")`.
- Transports: with `ssh:transport`, `ctx.ssh.transports.provide({ claims(hostId, host), open(host) })`, where `host` has `id`, `ip`, `port` and on Termix 26.10.6+ also `userId`, `syncId`, `connectionOrigin` and `localOnly`
+- Transports: with `ssh:transport`, `ctx.ssh.transports.provide({ claims(hostId), open({ id, ip, port }) })`
  returns a stream the SSH client uses instead of a direct, proxy or jump host connection. Core also serves
  `/plugin-ws/core/ssh-relay?hostId=` for callers with connect access, so one Termix can relay to another.
 - Managed hosts: with `hosts:lock`, `ctx.hosts.locks.provide({ isLocked, note, allowManualCreate })` makes
@@ -414,70 +414,6 @@ ctx.schedule.every(60_000, () => refresh(), { jitterMs: 5_000 });
 - Use a service: declare it in `requires`, then `ctx.services.get<T>("snippets.access")`. It returns
  nothing while no provider runs, so always handle that.

-### Operations
-
-Declare what your plugin can do in `contributes.operations`, and it shows up in Automations, Fleets, the
-assistant, the CLI, the phone app and the command palette with no other wiring. It also gets per host results,
-dry runs, run history, approvals and drift checks.
-
-```json
-"capabilities": ["operations:provide"],
-"engine": { "termix": ">=26.11.1-0", "api": "^1.13" },
-"contributes": {
-  "operations": {
-    "actions": [{
-      "id": "demo.restart",
-      "titleKey": "ops.restart.title",
-      "scope": "host",
-      "inputs": [{ "key": "name", "type": "string", "labelKey": "ops.restart.name", "required": true }],
-      "risk": "change",
-      "permission": "use",
-      "hostAccess": "edit",
-      "dryRun": "describe"
-    }]
-  }
-}
-```
-
-```ts
-ctx.operations.register("demo.restart", {
-  describe: (input) => `Would restart ${input.name}`,
-  run: async (input, { hostId, signal, log }) => {
-    return { summary: `Restarted ${input.name}`, changed: true };
-  },
-});
-```
-
- Actions: `scope` is `host`, `resource` or `server`. `risk` is `read`, `change` or `destructive`. Host actions declare
-  `hostAccess`. Use `edit` for changes unless people with `connect` already do this today. A destructive action
-  must use `edit` or `manage` and needs a confirm.
- Inputs use the settings field types, plus `required`, `pattern`, `optionsFrom` (a read action fills the choices)
-  and type `resource`. Keys you did not declare are refused before your handler runs. `secret` values reach the handler
-  but are never stored or shown. Mark private outputs `sensitive`.
- `dryRun`: `native` calls `run` with `dryRun: true` and nothing may change. `describe` calls `describe` instead.
- `check` names a read action that proves the result, used for drift. `undo` names the reverse action, and `run` returns
-  `undoInput`. `idempotent` lets a rollout retry it. `exclusive` allows one at a time per host. `when` limits it to
-  hosts by setting or OS.
- `surfaces`: the assistant and MCP are off until you set them true. Only do that for actions safe for a model to
-  ask for. The rest are on unless you set them false.
- Resources describe a kind of thing, such as a container: a read action on one host returns `{ rows }` as `data`, and
-  core draws the All hosts table and host page section. Attach actions with `scope: "resource"`.
- Signals are status tiles: a read action returns `{ value, status, label }` as `data`, with status `ok`, `warn`, `fail` or
-  `unknown`. `fix` names the action offered when it is not ok. Keep these reads cheap, they run for every host.
- Events: declare them, then call `ctx.operations.emit(id, payload, { hostId })`.
- Handlers must watch `signal` and stop when it fires. Throw on failure; a failed run never counts against your
-  plugin's error budget. Throw an error with `code = "NEEDS_INTERACTION"` when a host needs a person to sign in first.
- Handlers have no request and no session. Take what you need from the input and `hostId`.
- Keep your REST routes. Inside one, call `ctx.operations.run(id, { hostId, input })` so a button press goes through
-  the same checks and lands in the same history.
- To run another plugin's action, add `operations:invoke`, list it in `operations.invokes` and call
-  `ctx.operations.invoke(id, { hostId, input, via: "automation" })`. It acts as the current user and rules still apply.
- `risk` is your plugin's claim. Plugins run in-process, so this is not a sandbox. Actions from plugins not signed as
-  official count as `change` when rules decide what needs a person, and stay off the assistant and MCP until an admin
-  allows them.
- Set `engine.termix` to at least `>=26.11.1-0`. Keep `engine.api` as it was unless you import something new from
-  `/ui`, or the phone app will ask people to update to see your plugin.
-
 ### Shared packages

 These come from Termix and are never bundled: `@termix-ssh/plugin-sdk`, `express`, `ssh2`, `ws`, `multer`,
@@ -559,23 +495,6 @@ Other storage: `ctx.kv` for a few values, `ctx.settings` for settings, `ctx.secr
 `ctx.files.dataDir()` for files. To sync a table to a linked desktop, use `ctx.sync.registerEntity` and
 `contributes.syncEntities`. The entity name is part of the protocol and never changes.

-A registered table syncs the rows each user owns, both ways. For data you keep for the whole server (a shared
-library, rows other users share), register a read only entity with `table: null`, `readOnly: true` and `load`,
-`write` and `erase` (Termix 26.10.6+). `load(userId)` returns the rows that user should get, each with a
-`syncId`. The desktop keeps them with `write` and drops them with `erase`, and never pushes them back:
-
-```ts
-ctx.sync.registerEntity({
-  type: "sharedIcons",
-  table: null,
-  readOnly: true,
-  order: 70,
-  load: (userId) => iconsVisibleTo(userId),
-  write: (userId, row) => storeCopy(userId, row),
-  erase: (userId, syncId) => dropCopy(userId, syncId),
-});
-```
-
 ## Frontend

 ```tsx
@@ -1026,7 +945,6 @@ To run your own registry instead, see https://docs.termix.site/develop/registrie
 | `@termix-ssh/plugin-sdk/db`                                          | `defineTable` and column builders                                                              |
 | `@termix-ssh/plugin-sdk/manifest`                                    | `PluginManifest` type and manifest checks                                                      |
 | `@termix-ssh/plugin-sdk/capabilities`                                | The capability catalog                                                                         |
-| `@termix-ssh/plugin-sdk/operations`                                  | Types, input checks and JSON Schema for declared actions                                       |
 | `@termix-ssh/plugin-sdk/settings`                                    | Settings field validation                                                                      |
 | `@termix-ssh/plugin-sdk/testing`                                     | `createMockCtx`, `createTestDb`, `renderWithApp`, `createFakeContext`                          |
 | `@termix-ssh/plugin-sdk/vitest-preset`                               | `pluginVitestConfig`                                                                           |
@@ -1058,8 +976,6 @@ To run your own registry instead, see https://docs.termix.site/develop/registrie
 | `desktop:local`          | high     | Use the user's own computer, desktop app only                 |
 | `hosts:export`           | high     | Export hosts with their saved logins                          |
 | `notify:hub`             | high     | Receive every alert (the alerts hub only)                     |
-| `operations:invoke`      | high     | Run other plugins' declared actions, listed in `invokes`      |
-| `operations:approve`     | high     | Decide which actions need a person                            |
 | `ui:layout`              | high     | Replace the whole app layout                                  |
 | `hosts:write`            | medium   | Add and edit hosts                                            |
 | `hosts:status-provide`   | medium   | Be the source of host status dots                             |
@@ -1075,7 +991,6 @@ To run your own registry instead, see https://docs.termix.site/develop/registrie
 | `users:read`             | medium   | Usernames, roles and UI language                              |
 | `events:core`            | medium   | Listen to core events                                         |
 | `notify:send`            | medium   | Send alerts                                                   |
-| `operations:provide`     | medium   | Offer declared actions and events                             |
 | `audit:read`             | medium   | Read the audit log                                            |
 | `desktop:window`         | medium   | Open windows in the desktop app                               |
 | `hosts:read`             | low      | Read hosts the user can see                                   |
@@ -1,6 +1,6 @@
 {
  "name": "@termix-ssh/plugin-sdk",
-  "version": "1.0.23",
+  "version": "1.0.22",
  "description": "The contract between Termix core and a plugin: types, the capability catalog and the manifest schema.",
  "license": "Apache-2.0",
  "repository": {
@@ -61,10 +61,6 @@
      "types": "./dist/openapi.d.ts",
      "default": "./dist/openapi.js"
    },
-    "./operations": {
-      "types": "./dist/operations.d.ts",
-      "default": "./dist/operations.js"
-    },
    "./settings": {
      "types": "./dist/settings.d.ts",
      "default": "./dist/settings.js"
@@ -536,31 +536,6 @@
            }
          }
        },
-        "hostSections": {
-          "type": "array",
-          "items": {
-            "type": "object",
-            "additionalProperties": false,
-            "required": ["id", "titleKey"],
-            "properties": {
-              "id": { "type": "string", "minLength": 1 },
-              "titleKey": { "type": "string", "minLength": 1 },
-              "icon": { "type": "string", "minLength": 1 }
-            }
-          }
-        },
-        "operations": {
-          "type": "object",
-          "description": "What this plugin can do. Every surface finds these on its own. See the operations section of PLUGIN-GUIDE.md.",
-          "additionalProperties": false,
-          "properties": {
-            "actions": { "type": "array", "items": { "type": "object" } },
-            "events": { "type": "array", "items": { "type": "object" } },
-            "resources": { "type": "array", "items": { "type": "object" } },
-            "signals": { "type": "array", "items": { "type": "object" } },
-            "invokes": { "type": "array", "items": { "type": "string" } }
-          }
-        },
        "dashboardCards": {
          "type": "array",
          "items": {
@@ -14,11 +14,6 @@ import type { HostSshOptions } from "./ssh-options.js";
 export type { HostSshOptions } from "./ssh-options.js";
 import type { PluginManifest, PluginSettingsField } from "./manifest.js";
 import type { PluginTableDefinition } from "./db.js";
-import type {
-  OperationResult,
-  OperationRisk,
-  OperationSurfaces,
-} from "./operations.js";

 /**
 * Thrown when a plugin calls a guarded member without the capability.
@@ -182,24 +177,8 @@ export interface SyncWriteEvent {
 export interface SyncEntityRegistration {
  /** Stable wire name. Never change it: records on both sides match on it. */
  type: string;
-  /** The table, as returned by ctx.db.define. Null for an entity with `load`. */
+  /** The table, as returned by ctx.db.define. */
  table: unknown;
-  /**
-   * Server to desktop only: a desktop never pushes these rows. Required with
-   * `load`.
-   */
-  readOnly?: boolean;
-  /**
-   * Builds the rows the user gets instead of reading the rows they own in
-   * `table`, for data kept for the whole server (a shared library, rows other
-   * users share with them). Rows are on the wire: plaintext, each with a
-   * syncId. Needs `readOnly: true`, `write` and `erase`.
-   */
-  load?: (userId: string) => Promise<SyncRow[]>;
-  /** Keeps a copy of an inbound row on the desktop, for an entity with `load`. */
-  write?: (userId: string, wire: SyncRow) => Promise<void>;
-  /** Drops the desktop copy with this syncId, for an entity with `load`. */
-  erase?: (userId: string, syncId: string) => Promise<void>;
  /** Column holding the owning user id. Defaults to "userId". */
  userColumn?: string;
  /** Fields stored encrypted with the owner's data key. Plaintext on the wire. */
@@ -491,12 +470,6 @@ export interface PluginSyncHost {
    ensureCore: () => Promise<void>;
    onChanged: (listener: () => void) => () => void;
    onLocalWrite: (listener: () => void) => () => void;
-    /** Local ids of the user's own rows of a type, by sync id. Termix 26.10.6+. */
-    idsOf?: (
-      type: string,
-      userId: string,
-      syncIds: string[],
-    ) => Promise<Record<string, number>>;
  };

  /** Rows and bookkeeping of one local user's replica. */
@@ -1840,21 +1813,13 @@ export interface PluginNetwork {
 * asked for every connection, so it must be quick. `open` returns a stream
 * the SSH client runs over, like a relayed socket.
 */
-/** The host a transport is asked about. Fields past port come from Termix 26.10.6. */
-export interface PluginSshTransportHost {
-  id: number;
-  ip: string;
-  port: number;
-  /** Owner of the host row. */
-  userId?: string | null;
-  syncId?: string | null;
-  connectionOrigin?: "local" | "remote" | null;
-  localOnly?: boolean;
-}
-
 export interface PluginSshTransportProvider {
-  claims: (hostId: number, host?: PluginSshTransportHost) => boolean;
-  open: (host: PluginSshTransportHost) => Promise<import("node:stream").Duplex>;
+  claims: (hostId: number) => boolean;
+  open: (host: {
+    id: number;
+    ip: string;
+    port: number;
+  }) => Promise<import("node:stream").Duplex>;
 }

 export interface PluginSshTransports {
@@ -3109,136 +3074,6 @@ export interface PluginPlugins {
  list: () => Promise<PluginSummary[]>;
 }

-/** What a handler gets besides its input. */
-export interface PluginOperationContext {
-  hostId?: number;
-  /** The row a resource action targets. */
-  resourceKey?: string;
-  /** Null for a background read. */
-  runId: string | null;
-  /** Nothing may change when this is set. */
-  dryRun: boolean;
-  /** Fires when the run is cancelled, times out or the plugin stops. */
-  signal: AbortSignal;
-  log: (line: string) => void;
-}
-
-export interface PluginOperationHandler {
-  run: (
-    input: Record<string, unknown>,
-    context: PluginOperationContext,
-  ) => Promise<OperationResult> | OperationResult;
-  /** The dry run text for an action declared with dryRun "describe". */
-  describe?: (
-    input: Record<string, unknown>,
-    context: PluginOperationContext,
-  ) => string | Promise<string>;
-}
-
-export interface PluginOperationInvokeOptions {
-  hostId?: number;
-  resourceKey?: string;
-  input?: Record<string, unknown>;
-  dryRun?: boolean;
-  /** A person agreed to a destructive action. */
-  confirmed?: boolean;
-  idempotencyKey?: string;
-  batchId?: string;
-  /** What this plugin is doing: automation, assistant, mcp, rollout and so on. */
-  via?: string;
-}
-
-export interface PluginOperationOutcome {
-  runId: string | null;
-  status: string;
-  summary?: string;
-  changed?: boolean;
-  data?: unknown;
-  error?: string;
-  errorCode?: string;
-  approvalId?: string;
-}
-
-export interface PluginOperationApprovalInput {
-  actionId: string;
-  pluginId: string;
-  risk: OperationRisk;
-  /** What rules should use. Plugins not signed as official count as change. */
-  effectiveRisk: OperationRisk;
-  origin: { kind: string; pluginId?: string; via?: string };
-  userId: string;
-  hostId?: number;
-  hostTags?: string[];
-  batchId?: string;
-}
-
-export interface PluginOperationApprovalDecision {
-  decision: "allow" | "approve" | "deny";
-  reason?: string;
-  allowSelf?: boolean;
-  expiresInMinutes?: number;
-}
-
-export interface PluginOperationEvent {
-  id: string;
-  eventId: string;
-  pluginId: string;
-  hostId?: number;
-  severity?: string;
-  payload?: unknown;
-  runId?: string;
-  depth: number;
-  at: string;
-}
-
-/**
- * Declared actions and events. See contributes.operations in the manifest.
- * register and emit need operations:provide. invoke, list and onEvent need
- * operations:invoke, and invoke only reaches ids in the manifest's invokes list.
- */
-export interface PluginOperations {
-  register: (id: string, handler: PluginOperationHandler) => void;
-  /**
-   * Runs one of this plugin's own actions from its route, so a button press
-   * goes through the same checks and lands in the same history.
-   */
-  run: (
-    actionId: string,
-    options?: PluginOperationInvokeOptions,
-  ) => Promise<PluginOperationOutcome>;
-  invoke: (
-    actionId: string,
-    options?: PluginOperationInvokeOptions,
-  ) => Promise<PluginOperationOutcome>;
-  list: (options?: {
-    lang?: string;
-    surface?: keyof OperationSurfaces;
-  }) => Promise<unknown>;
-  emit: (
-    eventId: string,
-    payload?: unknown,
-    options?: { hostId?: number },
-  ) => Promise<void>;
-  onEvent: (subscription: {
-    pattern: string;
-    handler: (event: PluginOperationEvent) => void | Promise<void>;
-    userId?: string;
-    cooldownMs?: number;
-  }) => () => void;
-  /** Rules for what needs a person. Needs operations:approve. */
-  approvals: {
-    provide: (
-      provider: (
-        input: PluginOperationApprovalInput,
-      ) =>
-        | PluginOperationApprovalDecision
-        | null
-        | undefined
-        | Promise<PluginOperationApprovalDecision | null | undefined>,
-    ) => () => void;
-  };
-}
-
 export interface PluginContext {
  readonly pluginId: string;
  readonly manifest: PluginManifest;
@@ -3279,8 +3114,6 @@ export interface PluginContext {
  readonly schedule: PluginSchedule;
  /** Core's notification channels. Needs notify:send. */
  readonly notify: PluginNotify;
-  /** Declared actions and events, reachable from every surface. */
-  readonly operations: PluginOperations;
  /** Outbound HTTP through core's SSRF guard. Needs network:outbound. */
  readonly fetch: PluginFetch;
  /** Plain reachability checks. Needs network:probe. */
@@ -52,8 +52,6 @@ export const CAPABILITY_CATALOG: readonly CapabilityInfo[] = [
  entry("ssh:transport", "high"),
  entry("device:serial", "high"),
  entry("notify:hub", "high"),
-  entry("operations:invoke", "high"),
-  entry("operations:approve", "high"),
  entry("ui:layout", "high"),

  entry("hosts:write", "medium"),
@@ -70,7 +68,6 @@ export const CAPABILITY_CATALOG: readonly CapabilityInfo[] = [
  entry("users:read", "medium"),
  entry("events:core", "medium"),
  entry("notify:send", "medium"),
-  entry("operations:provide", "medium"),
  entry("audit:read", "medium"),
  entry("desktop:window", "medium"),
  entry("desktop:local", "high"),
@@ -206,8 +206,6 @@ export interface ShellApi {
   * user reviews and saves it. Absent in some shells.
   */
  openHostEditor?: (draft?: HostDraft) => void;
-  /** Opens the editor of a saved host. Termix 26.10.6+, absent in some shells. */
-  editHost?: (hostId: number) => void;
  /** Opens a rail view in the left sidebar. */
  openRailView: (id: string) => void;
  /** Closes a rail view wherever it is shown. */
@@ -427,11 +425,6 @@ export interface RailItemContribution {
   * Zero or nothing shows no badge.
   */
  useBadge?: () => number | null | undefined;
-  /**
-   * A hook for a small status dot on the icon: "ok" (green), "warning" or
-   * "error". Nothing shows no dot. Layouts from Termix 26.10.6 draw it.
-   */
-  useStatus?: () => "ok" | "warning" | "error" | null | undefined;
 }

 export interface PanelProps {
@@ -21,30 +21,6 @@ export interface ExecResult {
  code: number | null;
 }

-/**
- * Decodes raw command output. Strict UTF-8 first; when that fails, tries GBK,
- * which is what a Chinese-locale Windows console sends (its bytes are almost
- * never valid UTF-8) and keeps it only when it decodes without replacement
- * characters. Anything else falls back to lossy UTF-8, the old behavior.
- */
-export function decodeCommandOutput(buf: Buffer): string {
-  try {
-    return new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(
-      buf,
-    );
-  } catch {
-    // not valid UTF-8, try the legacy codepage
-  }
-  try {
-    // A Node built with small-ICU has no GBK decoder and throws here.
-    const gbk = new TextDecoder("gbk").decode(buf);
-    if (!gbk.includes("�")) return gbk;
-  } catch {
-    // expected - fall through to lossy UTF-8
-  }
-  return buf.toString("utf8");
-}
-
 /** Runs one non-interactive command over an existing ssh2 client. */
 export function execCommand(
  client: Client,
@@ -89,10 +65,8 @@ export function execCommand(
      }

      stream = _stream;
-      // Chunks are buffered and decoded once on close: a multi-byte character
-      // can be split across chunks, and charset detection needs it whole.
-      const stdout: Buffer[] = [];
-      const stderr: Buffer[] = [];
+      let stdout = "";
+      let stderr = "";
      let exitCode: number | null = null;

      stream
@@ -101,15 +75,11 @@ export function execCommand(
            settled = true;
            exitCode = typeof code === "number" ? code : null;
            cleanup();
-            resolve({
-              stdout: decodeCommandOutput(Buffer.concat(stdout)),
-              stderr: decodeCommandOutput(Buffer.concat(stderr)),
-              code: exitCode,
-            });
+            resolve({ stdout, stderr, code: exitCode });
          }
        })
        .on("data", (data: Buffer) => {
-          stdout.push(data);
+          stdout += data.toString("utf8");
        })
        .on("error", (streamErr: Error) => {
          if (!settled) {
@@ -122,7 +92,7 @@ export function execCommand(
      if (stream.stderr) {
        stream.stderr
          .on("data", (data: Buffer) => {
-            stderr.push(data);
+            stderr += data.toString("utf8");
          })
          .on("error", (stderrErr: Error) => {
            if (!settled) {
@@ -12,11 +12,6 @@

 import semver from "semver";
 import { isKnownCapability } from "./capabilities.js";
-import {
-  checkOperationReferences,
-  validateOperations,
-  type PluginOperationsContribution,
-} from "./operations.js";
 import {
  ENV_NAME_PATTERN,
  MAX_ENV_DESCRIPTION_LENGTH,
@@ -42,7 +37,7 @@ export {
 * "^1.2" needs 1.2 or later). engine.termix is checked against the core
 * version by the server.
 */
-export const PLUGIN_API_VERSION = "1.14.0";
+export const PLUGIN_API_VERSION = "1.13.0";

 /** The API major, the default engine.api for a new plugin. */
 export const SUPPORTED_PLUGIN_API_VERSION = String(
@@ -470,10 +465,6 @@ export interface PluginContributions {
  tabs?: PluginTabContribution[];
  panels?: PluginViewContribution[];
  dashboardCards?: PluginViewContribution[];
-  /** Cards on the host page, filled with app.registerHostSection. */
-  hostSections?: PluginViewContribution[];
-  /** What this plugin can do, for every surface to find on its own. */
-  operations?: PluginOperationsContribution;
  /**
   * The frontend also runs on anonymous guest pages (shared-session and
   * collab links), where it is activated with app.guest set.
@@ -788,8 +779,6 @@ const ALLOWED_CONTRIBUTES = new Set([
  "tabs",
  "panels",
  "dashboardCards",
-  "hostSections",
-  "operations",
  "guest",
  "guestViews",
  "actions",
@@ -1511,8 +1500,6 @@ function validateContributes(
  validateTabs(contributes.tabs, errors);
  validateViews(contributes.panels, "panels", errors);
  validateViews(contributes.dashboardCards, "dashboardCards", errors);
-  validateViews(contributes.hostSections, "hostSections", errors);
-  validateOperations(contributes.operations, pluginId, errors);
  if (
    contributes.guest !== undefined &&
    typeof contributes.guest !== "boolean"
@@ -2635,12 +2622,6 @@ export function parseManifest(raw: unknown): ParsedManifest {
      );
    }
  }
-  checkOperationReferences(
-    manifest.contributes?.operations,
-    manifest.capabilities,
-    (name) => declared.has(qualifyPermission(manifest.id, name)),
-    errors,
-  );
  // A settings field may gate on one of this plugin's own permissions, or on
  // a core/other-plugin id used as given. Only the first form is checkable
  // here, and an undeclared one would hide the field from every admin.
@@ -1,951 +0,0 @@
-/**
- * The operations contract: what a plugin declares it can do, in one shape every
- * surface reads (Automations, Fleets, AI, CLI, Mobile, palette, API, MCP).
- *
- * Declarations are data in the manifest, so a surface can list and describe an
- * action without loading the plugin's code. Handlers are registered at
- * activation with ctx.operations.register and must match a declaration.
- *
- * No Node imports: the frontend, the CLI and Mobile read this file too.
- */
-
-import { coerceSettingValue, validateSettingValue } from "./settings.js";
-import type { PluginSettingsField, PluginSettingsOption } from "./manifest.js";
-
-export const OPERATION_RISKS = ["read", "change", "destructive"] as const;
-export type OperationRisk = (typeof OPERATION_RISKS)[number];
-
-export const OPERATION_SCOPES = ["host", "resource", "server"] as const;
-export type OperationScope = (typeof OPERATION_SCOPES)[number];
-
-export const OPERATION_HOST_ACCESS = [
-  "connect",
-  "view",
-  "edit",
-  "manage",
-] as const;
-export type OperationHostAccess = (typeof OPERATION_HOST_ACCESS)[number];
-
-export const OPERATION_DRY_RUN = ["native", "describe"] as const;
-/** native: the handler checks ctx.dryRun. describe: core reports its text. */
-export type OperationDryRun = (typeof OPERATION_DRY_RUN)[number];
-
-export const OPERATION_FIELD_TYPES = [
-  "boolean",
-  "string",
-  "number",
-  "select",
-  "multiselect",
-  "secret",
-  "textarea",
-  "json",
-  "resource",
-] as const;
-export type OperationFieldType = (typeof OPERATION_FIELD_TYPES)[number];
-
-export const OPERATION_SEVERITIES = ["info", "warning", "critical"] as const;
-export type OperationSeverity = (typeof OPERATION_SEVERITIES)[number];
-
-export const SIGNAL_KINDS = ["count", "gauge", "status", "list"] as const;
-export type SignalKind = (typeof SIGNAL_KINDS)[number];
-
-export const SIGNAL_STATUSES = ["ok", "warn", "fail", "unknown"] as const;
-export type SignalStatus = (typeof SIGNAL_STATUSES)[number];
-
-export const RESOURCE_COLUMN_TYPES = [
-  "text",
-  "status",
-  "bytes",
-  "percent",
-  "time",
-  "tags",
-] as const;
-export type ResourceColumnType = (typeof RESOURCE_COLUMN_TYPES)[number];
-
-/** One input or output of an action. A subset of a settings field, plus rules. */
-export interface OperationField {
-  key: string;
-  type: OperationFieldType;
-  labelKey?: string;
-  descriptionKey?: string;
-  placeholderKey?: string;
-  default?: unknown;
-  options?: PluginSettingsOption[];
-  min?: number;
-  max?: number;
-  /** Key of a boolean field in the same list that must be on. */
-  requires?: string;
-  group?: string;
-  required?: boolean;
-  /** string and textarea only. A regular expression the whole value matches. */
-  pattern?: string;
-  /** Read action whose rows fill the choices, for a list known only at run time. */
-  optionsFrom?: string;
-  /** type "resource" only: the resource id whose list fills the picker. */
-  resource?: string;
-  /** Outputs only: dropped before a run is stored or shown. */
-  sensitive?: boolean;
-}
-
-export interface OperationWhen {
-  /** Host setting values that must match, such as { enableDocker: true }. */
-  settings?: Record<string, boolean | string | number>;
-  /** Lowercase OS names. A host with no known OS passes. */
-  os?: string[];
-}
-
-export interface OperationSurfaces {
-  /** Offered to the AI assistant. Off unless set. */
-  assistant?: boolean;
-  /** Offered over MCP. Off unless set. */
-  mcp?: boolean;
-  /** Set false to keep out of the command palette. */
-  palette?: boolean;
-  /** Set false to keep out of Automations. */
-  automations?: boolean;
-  /** Set false to keep out of the phone app. */
-  mobile?: boolean;
-  /** Set false to keep out of the CLI. */
-  cli?: boolean;
-}
-
-export interface OperationAction {
-  /** `<pluginId>.<name>`. */
-  id: string;
-  /** Bump when inputs change in a way saved references cannot follow. */
-  version?: number;
-  titleKey: string;
-  descriptionKey?: string;
-  icon?: string;
-  scope: OperationScope;
-  /** Required for scope "resource": the resource this acts on. */
-  resource?: string;
-  inputs?: OperationField[];
-  outputs?: OperationField[];
-  risk: OperationRisk;
-  /** One of this plugin's own permissions, short or full. */
-  permission: string;
-  /** Lowest share level. Required for host and resource scopes. */
-  hostAccess?: OperationHostAccess;
-  dryRun?: OperationDryRun;
-  /** A read action of this plugin that proves the result. */
-  check?: string;
-  /** An action of this plugin that reverses this one. */
-  undo?: string;
-  /** Safe to run twice, so a rollout may retry it. */
-  idempotent?: boolean;
-  /** Only one such action per host at a time. */
-  exclusive?: boolean;
-  timeoutMs?: number;
-  when?: OperationWhen;
-  surfaces?: OperationSurfaces;
-}
-
-export interface OperationEvent {
-  id: string;
-  titleKey: string;
-  descriptionKey?: string;
-  severity?: OperationSeverity;
-  scope: "host" | "server";
-  payload?: OperationField[];
-}
-
-export interface ResourceColumn {
-  key: string;
-  titleKey: string;
-  type?: ResourceColumnType;
-}
-
-export interface OperationResource {
-  id: string;
-  titleKey: string;
-  icon?: string;
-  /** Read action that returns { rows: [...] } for one host. */
-  list: string;
-  /** Row field that is unique on a host. */
-  key: string;
-  /** Row field shown as the name. */
-  name: string;
-  /** Row field holding a status word. */
-  status?: string;
-  /** Row field holding a link, for auto links on the homepage. */
-  url?: string;
-  /** Tab type that opens this on a host. */
-  tab?: string;
-  columns?: ResourceColumn[];
-  filters?: string[];
-}
-
-export interface OperationSignal {
-  id: string;
-  titleKey: string;
-  /** Read action that returns a SignalResult. */
-  read: string;
-  scope: "host" | "server";
-  kind: SignalKind;
-  refreshSec?: number;
-  /** Action offered as the fix when this signal is not ok. */
-  fix?: string;
-}
-
-export interface PluginOperationsContribution {
-  actions?: OperationAction[];
-  events?: OperationEvent[];
-  resources?: OperationResource[];
-  signals?: OperationSignal[];
-  /**
-   * Actions this plugin may run through ctx.operations.invoke: exact ids,
-   * `<pluginId>.*`, or `*`.
-   */
-  invokes?: string[];
-}
-
-/** What a signal's read action returns. */
-export interface SignalResult {
-  value?: number | string | null;
-  status: SignalStatus;
-  label?: string;
-  items?: { label: string; status?: SignalStatus }[];
-  link?: { tab?: string; data?: Record<string, unknown> };
-}
-
-/** What a resource's list action returns. */
-export interface ResourceListResult {
-  rows: Record<string, unknown>[];
-}
-
-/** What a handler returns. */
-export interface OperationResult {
-  /** One plain line for history and per host results. */
-  summary: string;
-  /** Whether anything actually changed. */
-  changed?: boolean;
-  data?: unknown;
-  /** Input for the `undo` action that reverses this exact run. */
-  undoInput?: Record<string, unknown>;
-}
-
-export const OPERATION_ID_PATTERN = /^[a-z0-9][a-z0-9-]*\.[a-z0-9][a-z0-9-]*$/;
-
-const FIELD_KEY_PATTERN = /^[a-zA-Z][a-zA-Z0-9_-]{0,63}$/;
-const INVOKE_PATTERN = /^(\*|[a-z0-9][a-z0-9-]*\.(\*|[a-z0-9][a-z0-9-]*))$/;
-
-export const MAX_OPERATION_TIMEOUT_MS = 3_600_000;
-export const REDACTED_VALUE = "[redacted]";
-
-const ALLOWED_OPERATIONS = [
-  "actions",
-  "events",
-  "resources",
-  "signals",
-  "invokes",
-];
-const ALLOWED_ACTION = [
-  "id",
-  "version",
-  "titleKey",
-  "descriptionKey",
-  "icon",
-  "scope",
-  "resource",
-  "inputs",
-  "outputs",
-  "risk",
-  "permission",
-  "hostAccess",
-  "dryRun",
-  "check",
-  "undo",
-  "idempotent",
-  "exclusive",
-  "timeoutMs",
-  "when",
-  "surfaces",
-];
-const ALLOWED_FIELD = [
-  "key",
-  "type",
-  "labelKey",
-  "descriptionKey",
-  "placeholderKey",
-  "default",
-  "options",
-  "min",
-  "max",
-  "requires",
-  "group",
-  "required",
-  "pattern",
-  "optionsFrom",
-  "resource",
-  "sensitive",
-];
-const ALLOWED_EVENT = [
-  "id",
-  "titleKey",
-  "descriptionKey",
-  "severity",
-  "scope",
-  "payload",
-];
-const ALLOWED_RESOURCE = [
-  "id",
-  "titleKey",
-  "icon",
-  "list",
-  "key",
-  "name",
-  "status",
-  "url",
-  "tab",
-  "columns",
-  "filters",
-];
-const ALLOWED_SIGNAL = [
-  "id",
-  "titleKey",
-  "read",
-  "scope",
-  "kind",
-  "refreshSec",
-  "fix",
-];
-const ALLOWED_SURFACES = [
-  "assistant",
-  "mcp",
-  "palette",
-  "automations",
-  "mobile",
-  "cli",
-];
-
-function isObject(value: unknown): value is Record<string, unknown> {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-
-function rejectUnknown(
-  raw: Record<string, unknown>,
-  allowed: string[],
-  where: string,
-  errors: string[],
-): void {
-  for (const key of Object.keys(raw)) {
-    if (!allowed.includes(key))
-      errors.push(`Unknown field "${key}" in ${where}`);
-  }
-}
-
-function requireEnum(
-  value: unknown,
-  allowed: readonly string[],
-  where: string,
-  errors: string[],
-): void {
-  if (typeof value !== "string" || !allowed.includes(value)) {
-    errors.push(`${where} must be one of: ${allowed.join(", ")}`);
-  }
-}
-
-function requireText(value: unknown, where: string, errors: string[]): void {
-  if (typeof value !== "string" || value.trim().length === 0) {
-    errors.push(`${where} must be a non-empty string`);
-  }
-}
-
-function optionalText(value: unknown, where: string, errors: string[]): void {
-  if (value !== undefined) requireText(value, where, errors);
-}
-
-function optionalBoolean(
-  value: unknown,
-  where: string,
-  errors: string[],
-): void {
-  if (value !== undefined && typeof value !== "boolean") {
-    errors.push(`${where} must be a boolean`);
-  }
-}
-
-function requireId(
-  value: unknown,
-  pluginId: string | undefined,
-  where: string,
-  seen: Set<string>,
-  errors: string[],
-): void {
-  if (typeof value !== "string" || !OPERATION_ID_PATTERN.test(value)) {
-    errors.push(`${where}.id must look like "<pluginId>.<name>" in lowercase`);
-    return;
-  }
-  if (pluginId && !value.startsWith(`${pluginId}.`)) {
-    errors.push(`${where}.id must start with "${pluginId}."`);
-  }
-  if (seen.has(value)) errors.push(`${where}.id "${value}" is declared twice`);
-  seen.add(value);
-}
-
-function eachObject(
-  value: unknown,
-  where: string,
-  errors: string[],
-  each: (raw: Record<string, unknown>, at: string) => void,
-): void {
-  if (value === undefined) return;
-  if (!Array.isArray(value)) {
-    errors.push(`${where} must be an array`);
-    return;
-  }
-  value.forEach((raw, index) => {
-    const at = `${where}[${index}]`;
-    if (!isObject(raw)) {
-      errors.push(`${at} must be an object`);
-      return;
-    }
-    each(raw, at);
-  });
-}
-
-function validateFields(value: unknown, where: string, errors: string[]): void {
-  const keys = new Set<string>();
-  eachObject(value, where, errors, (raw, at) => {
-    rejectUnknown(raw, ALLOWED_FIELD, at, errors);
-    if (typeof raw.key !== "string" || !FIELD_KEY_PATTERN.test(raw.key)) {
-      errors.push(`${at}.key must be a short name starting with a letter`);
-    } else if (keys.has(raw.key)) {
-      errors.push(`${at}.key "${raw.key}" is declared twice`);
-    } else {
-      keys.add(raw.key);
-    }
-    requireEnum(raw.type, OPERATION_FIELD_TYPES, `${at}.type`, errors);
-    optionalText(raw.labelKey, `${at}.labelKey`, errors);
-    optionalText(raw.descriptionKey, `${at}.descriptionKey`, errors);
-    optionalText(raw.placeholderKey, `${at}.placeholderKey`, errors);
-    optionalText(raw.group, `${at}.group`, errors);
-    optionalText(raw.requires, `${at}.requires`, errors);
-    optionalText(raw.optionsFrom, `${at}.optionsFrom`, errors);
-    optionalBoolean(raw.required, `${at}.required`, errors);
-    optionalBoolean(raw.sensitive, `${at}.sensitive`, errors);
-    if (raw.type === "resource" && typeof raw.resource !== "string") {
-      errors.push(`${at}.resource is required for type "resource"`);
-    }
-    if (raw.resource !== undefined && raw.type !== "resource") {
-      errors.push(`${at}.resource needs type "resource"`);
-    }
-    if (raw.type === "secret" && raw.default !== undefined) {
-      errors.push(`${at}.default is not allowed on a secret`);
-    }
-    if (
-      (raw.type === "select" || raw.type === "multiselect") &&
-      !raw.optionsFrom &&
-      (!Array.isArray(raw.options) || raw.options.length === 0)
-    ) {
-      errors.push(`${at} needs options or optionsFrom`);
-    }
-    for (const bound of ["min", "max"] as const) {
-      if (raw[bound] !== undefined && typeof raw[bound] !== "number") {
-        errors.push(`${at}.${bound} must be a number`);
-      }
-    }
-    if (raw.pattern !== undefined) {
-      if (typeof raw.pattern !== "string") {
-        errors.push(`${at}.pattern must be a string`);
-      } else {
-        try {
-          new RegExp(raw.pattern);
-        } catch {
-          errors.push(`${at}.pattern is not a valid regular expression`);
-        }
-      }
-    }
-  });
-}
-
-function validateWhen(value: unknown, at: string, errors: string[]): void {
-  if (value === undefined) return;
-  if (!isObject(value)) {
-    errors.push(`${at} must be an object`);
-    return;
-  }
-  rejectUnknown(value, ["settings", "os"], at, errors);
-  if (value.settings !== undefined && !isObject(value.settings)) {
-    errors.push(`${at}.settings must be an object`);
-  }
-  if (
-    value.os !== undefined &&
-    (!Array.isArray(value.os) ||
-      value.os.some((entry) => typeof entry !== "string"))
-  ) {
-    errors.push(`${at}.os must be an array of strings`);
-  }
-}
-
-function validateAction(
-  raw: Record<string, unknown>,
-  at: string,
-  errors: string[],
-): void {
-  rejectUnknown(raw, ALLOWED_ACTION, at, errors);
-  requireText(raw.titleKey, `${at}.titleKey`, errors);
-  optionalText(raw.descriptionKey, `${at}.descriptionKey`, errors);
-  optionalText(raw.icon, `${at}.icon`, errors);
-  requireEnum(raw.scope, OPERATION_SCOPES, `${at}.scope`, errors);
-  requireEnum(raw.risk, OPERATION_RISKS, `${at}.risk`, errors);
-  requireText(raw.permission, `${at}.permission`, errors);
-  validateFields(raw.inputs, `${at}.inputs`, errors);
-  validateFields(raw.outputs, `${at}.outputs`, errors);
-  validateWhen(raw.when, `${at}.when`, errors);
-  optionalBoolean(raw.idempotent, `${at}.idempotent`, errors);
-  optionalBoolean(raw.exclusive, `${at}.exclusive`, errors);
-
-  if (
-    raw.version !== undefined &&
-    (!Number.isInteger(raw.version) || (raw.version as number) < 1)
-  ) {
-    errors.push(`${at}.version must be a whole number from 1`);
-  }
-  if (raw.dryRun !== undefined) {
-    requireEnum(raw.dryRun, OPERATION_DRY_RUN, `${at}.dryRun`, errors);
-  }
-  if (
-    raw.timeoutMs !== undefined &&
-    (typeof raw.timeoutMs !== "number" ||
-      raw.timeoutMs <= 0 ||
-      raw.timeoutMs > MAX_OPERATION_TIMEOUT_MS)
-  ) {
-    errors.push(`${at}.timeoutMs must be above 0 and at most 1 hour`);
-  }
-  if (raw.scope === "resource" && typeof raw.resource !== "string") {
-    errors.push(`${at}.resource is required for scope "resource"`);
-  }
-  if (raw.scope !== "resource" && raw.resource !== undefined) {
-    errors.push(`${at}.resource needs scope "resource"`);
-  }
-  if (raw.scope === "server" && raw.hostAccess !== undefined) {
-    errors.push(`${at}.hostAccess does not apply to scope "server"`);
-  }
-  if (raw.scope === "host" || raw.scope === "resource") {
-    requireEnum(
-      raw.hostAccess,
-      OPERATION_HOST_ACCESS,
-      `${at}.hostAccess`,
-      errors,
-    );
-    if (
-      raw.risk === "destructive" &&
-      (raw.hostAccess === "connect" || raw.hostAccess === "view")
-    ) {
-      errors.push(`${at}.hostAccess must be edit or manage when destructive`);
-    }
-  }
-  if (raw.surfaces !== undefined) {
-    if (!isObject(raw.surfaces)) {
-      errors.push(`${at}.surfaces must be an object`);
-    } else {
-      rejectUnknown(raw.surfaces, ALLOWED_SURFACES, `${at}.surfaces`, errors);
-      for (const [key, value] of Object.entries(raw.surfaces)) {
-        optionalBoolean(value, `${at}.surfaces.${key}`, errors);
-      }
-    }
-  }
-}
-
-function validateResource(
-  raw: Record<string, unknown>,
-  at: string,
-  errors: string[],
-): void {
-  rejectUnknown(raw, ALLOWED_RESOURCE, at, errors);
-  requireText(raw.titleKey, `${at}.titleKey`, errors);
-  requireText(raw.list, `${at}.list`, errors);
-  requireText(raw.key, `${at}.key`, errors);
-  requireText(raw.name, `${at}.name`, errors);
-  optionalText(raw.icon, `${at}.icon`, errors);
-  optionalText(raw.status, `${at}.status`, errors);
-  optionalText(raw.url, `${at}.url`, errors);
-  optionalText(raw.tab, `${at}.tab`, errors);
-  eachObject(raw.columns, `${at}.columns`, errors, (column, where) => {
-    rejectUnknown(column, ["key", "titleKey", "type"], where, errors);
-    requireText(column.key, `${where}.key`, errors);
-    requireText(column.titleKey, `${where}.titleKey`, errors);
-    if (column.type !== undefined) {
-      requireEnum(column.type, RESOURCE_COLUMN_TYPES, `${where}.type`, errors);
-    }
-  });
-  if (
-    raw.filters !== undefined &&
-    (!Array.isArray(raw.filters) ||
-      raw.filters.some((entry) => typeof entry !== "string"))
-  ) {
-    errors.push(`${at}.filters must be an array of strings`);
-  }
-}
-
-/** Shape checks for contributes.operations, run by validateManifest. */
-export function validateOperations(
-  value: unknown,
-  pluginId: string | undefined,
-  errors: string[],
-): void {
-  if (value === undefined) return;
-  const root = "contributes.operations";
-  if (!isObject(value)) {
-    errors.push(`Field "${root}" must be an object`);
-    return;
-  }
-  rejectUnknown(value, ALLOWED_OPERATIONS, `"${root}"`, errors);
-
-  const ids = new Set<string>();
-  eachObject(value.actions, `${root}.actions`, errors, (raw, at) => {
-    requireId(raw.id, pluginId, at, ids, errors);
-    validateAction(raw, at, errors);
-  });
-
-  const eventIds = new Set<string>();
-  eachObject(value.events, `${root}.events`, errors, (raw, at) => {
-    requireId(raw.id, pluginId, at, eventIds, errors);
-    rejectUnknown(raw, ALLOWED_EVENT, at, errors);
-    requireText(raw.titleKey, `${at}.titleKey`, errors);
-    optionalText(raw.descriptionKey, `${at}.descriptionKey`, errors);
-    requireEnum(raw.scope, ["host", "server"], `${at}.scope`, errors);
-    if (raw.severity !== undefined) {
-      requireEnum(raw.severity, OPERATION_SEVERITIES, `${at}.severity`, errors);
-    }
-    validateFields(raw.payload, `${at}.payload`, errors);
-  });
-
-  const resourceIds = new Set<string>();
-  eachObject(value.resources, `${root}.resources`, errors, (raw, at) => {
-    requireId(raw.id, pluginId, at, resourceIds, errors);
-    validateResource(raw, at, errors);
-  });
-
-  const signalIds = new Set<string>();
-  eachObject(value.signals, `${root}.signals`, errors, (raw, at) => {
-    requireId(raw.id, pluginId, at, signalIds, errors);
-    rejectUnknown(raw, ALLOWED_SIGNAL, at, errors);
-    requireText(raw.titleKey, `${at}.titleKey`, errors);
-    requireText(raw.read, `${at}.read`, errors);
-    requireEnum(raw.scope, ["host", "server"], `${at}.scope`, errors);
-    requireEnum(raw.kind, SIGNAL_KINDS, `${at}.kind`, errors);
-    optionalText(raw.fix, `${at}.fix`, errors);
-    if (
-      raw.refreshSec !== undefined &&
-      (typeof raw.refreshSec !== "number" || raw.refreshSec < 10)
-    ) {
-      errors.push(`${at}.refreshSec must be at least 10`);
-    }
-  });
-
-  if (value.invokes !== undefined) {
-    if (
-      !Array.isArray(value.invokes) ||
-      value.invokes.some(
-        (entry) => typeof entry !== "string" || !INVOKE_PATTERN.test(entry),
-      )
-    ) {
-      errors.push(
-        `${root}.invokes must list action ids, "<pluginId>.*" or "*"`,
-      );
-    }
-  }
-}
-
-/**
- * The cross-field rules: every id one declaration names must exist in this
- * plugin, or a surface would offer a button that goes nowhere.
- */
-export function checkOperationReferences(
-  operations: PluginOperationsContribution | undefined,
-  capabilities: readonly string[],
-  hasPermission: (name: string) => boolean,
-  errors: string[],
-): void {
-  if (!operations) return;
-  const root = "contributes.operations";
-  const actions = new Map(
-    (operations.actions ?? []).map((action) => [action.id, action]),
-  );
-  const resources = new Set((operations.resources ?? []).map((r) => r.id));
-
-  const declaresAnything =
-    actions.size > 0 ||
-    (operations.events?.length ?? 0) > 0 ||
-    resources.size > 0 ||
-    (operations.signals?.length ?? 0) > 0;
-  if (declaresAnything && !capabilities.includes("operations:provide")) {
-    errors.push(`${root} needs the "operations:provide" capability`);
-  }
-  if (
-    operations.invokes?.length &&
-    !capabilities.includes("operations:invoke")
-  ) {
-    errors.push(`${root}.invokes needs the "operations:invoke" capability`);
-  }
-
-  const readAction = (id: string, where: string) => {
-    const target = actions.get(id);
-    if (!target) errors.push(`${where} "${id}" is not a declared action`);
-    else if (target.risk !== "read") {
-      errors.push(`${where} "${id}" must be a read action`);
-    }
-  };
-
-  for (const action of actions.values()) {
-    const at = `${root}.actions["${action.id}"]`;
-    if (!hasPermission(action.permission)) {
-      errors.push(
-        `${at}.permission "${action.permission}" is not declared in contributes.permissions`,
-      );
-    }
-    if (action.resource && !resources.has(action.resource)) {
-      errors.push(`${at}.resource "${action.resource}" is not declared`);
-    }
-    if (action.check) readAction(action.check, `${at}.check`);
-    if (action.undo && !actions.has(action.undo)) {
-      errors.push(`${at}.undo "${action.undo}" is not a declared action`);
-    }
-    for (const field of action.inputs ?? []) {
-      if (field.optionsFrom) {
-        readAction(field.optionsFrom, `${at} input "${field.key}" optionsFrom`);
-      }
-      if (field.resource && !resources.has(field.resource)) {
-        errors.push(`${at} input "${field.key}" names an unknown resource`);
-      }
-    }
-  }
-  for (const resource of operations.resources ?? []) {
-    readAction(resource.list, `${root}.resources["${resource.id}"].list`);
-  }
-  for (const signal of operations.signals ?? []) {
-    const at = `${root}.signals["${signal.id}"]`;
-    readAction(signal.read, `${at}.read`);
-    if (signal.fix && !actions.has(signal.fix)) {
-      errors.push(`${at}.fix "${signal.fix}" is not a declared action`);
-    }
-  }
-}
-
-/** Whether a plugin's invokes list lets it run an action. */
-export function invokeAllowed(
-  invokes: readonly string[] | undefined,
-  actionId: string,
-): boolean {
-  for (const entry of invokes ?? []) {
-    if (entry === "*" || entry === actionId) return true;
-    if (entry.endsWith(".*") && actionId.startsWith(entry.slice(0, -1))) {
-      return true;
-    }
-  }
-  return false;
-}
-
-const RISK_RANK: Record<OperationRisk, number> = {
-  read: 0,
-  change: 1,
-  destructive: 2,
-};
-
-export function riskRank(risk: OperationRisk): number {
-  return RISK_RANK[risk];
-}
-
-/** A surface's own switch. The assistant and MCP are opt in, the rest opt out. */
-export function onSurface(
-  action: Pick<OperationAction, "surfaces">,
-  surface: keyof OperationSurfaces,
-): boolean {
-  const value = action.surfaces?.[surface];
-  if (surface === "assistant" || surface === "mcp") return value === true;
-  return value !== false;
-}
-
-/** Whether an action applies to a host, from fields any client can read. */
-export function matchesWhen(
-  when: OperationWhen | undefined,
-  host: { settings?: Record<string, unknown>; os?: string | null },
-): boolean {
-  if (!when) return true;
-  for (const [key, expected] of Object.entries(when.settings ?? {})) {
-    if (host.settings?.[key] !== expected) return false;
-  }
-  if (when.os?.length && host.os) {
-    if (!when.os.includes(host.os.toLowerCase())) return false;
-  }
-  return true;
-}
-
-function asSettingsField(field: OperationField): PluginSettingsField {
-  const type = field.type === "resource" ? "string" : field.type;
-  return { ...field, type } as PluginSettingsField;
-}
-
-function isEmpty(value: unknown): boolean {
-  return value === undefined || value === null || value === "";
-}
-
-export interface OperationInputResult {
-  values: Record<string, unknown>;
-  errors: string[];
-}
-
-/**
- * Turns raw input into validated values. Keys no field declares are refused,
- * so nothing a handler did not ask for ever reaches it.
- */
-export function parseOperationInput(
-  fields: readonly OperationField[] | undefined,
-  raw: unknown,
-): OperationInputResult {
-  const errors: string[] = [];
-  const values: Record<string, unknown> = {};
-  const list = fields ?? [];
-
-  if (raw !== undefined && raw !== null && !isObject(raw)) {
-    return { values, errors: ["Input must be an object"] };
-  }
-  const input = (raw ?? {}) as Record<string, unknown>;
-  for (const key of Object.keys(input)) {
-    if (!list.some((field) => field.key === key)) {
-      errors.push(`"${key}" is not an input of this action`);
-    }
-  }
-
-  for (const field of list) {
-    if (field.requires && input[field.requires] !== true) continue;
-
-    let value = input[field.key];
-    if (isEmpty(value)) {
-      if (field.default !== undefined) {
-        values[field.key] = field.default;
-      } else if (field.required) {
-        errors.push(`"${field.key}" is required`);
-      }
-      continue;
-    }
-
-    const settingsField = asSettingsField(field);
-    value = coerceSettingValue(settingsField, value);
-
-    if (field.type === "secret" && typeof value !== "string") {
-      errors.push(`"${field.key}" must be a string`);
-      continue;
-    }
-    if (field.type === "json" && typeof value === "string") {
-      try {
-        value = JSON.parse(value);
-      } catch {
-        errors.push(`"${field.key}" must be valid JSON`);
-        continue;
-      }
-    }
-
-    // A list known only at run time is checked by the handler.
-    const skipChoices =
-      field.optionsFrom &&
-      (field.type === "select" || field.type === "multiselect");
-    const problem = skipChoices
-      ? field.type === "select"
-        ? typeof value === "string"
-          ? null
-          : `"${field.key}" must be a string`
-        : Array.isArray(value)
-          ? null
-          : `"${field.key}" must be an array`
-      : validateSettingValue(settingsField, value);
-    if (problem) {
-      errors.push(problem);
-      continue;
-    }
-
-    if (
-      field.pattern &&
-      typeof value === "string" &&
-      !new RegExp(`^(?:${field.pattern})$`).test(value)
-    ) {
-      errors.push(`"${field.key}" has the wrong format`);
-      continue;
-    }
-    values[field.key] = value;
-  }
-
-  return { values, errors };
-}
-
-/** A copy safe to store or show: secret and sensitive values are replaced. */
-export function redactFields(
-  fields: readonly OperationField[] | undefined,
-  values: unknown,
-): unknown {
-  if (!isObject(values)) return values;
-  const copy: Record<string, unknown> = { ...values };
-  for (const field of fields ?? []) {
-    if (field.type !== "secret" && !field.sensitive) continue;
-    if (field.key in copy) copy[field.key] = REDACTED_VALUE;
-  }
-  return copy;
-}
-
-/** Trims text to a byte-friendly length with a plain marker. */
-export function capText(text: string, maxLength: number): string {
-  return text.length <= maxLength
-    ? text
-    : `${text.slice(0, maxLength)}\n[cut at ${maxLength} characters]`;
-}
-
-function fieldSchema(field: OperationField): Record<string, unknown> {
-  const schema: Record<string, unknown> = {};
-  if (field.default !== undefined) schema.default = field.default;
-  const values = field.optionsFrom
-    ? undefined
-    : field.options?.map((option) => option.value);
-
-  switch (field.type) {
-    case "boolean":
-      schema.type = "boolean";
-      break;
-    case "number":
-      schema.type = "number";
-      if (field.min !== undefined) schema.minimum = field.min;
-      if (field.max !== undefined) schema.maximum = field.max;
-      break;
-    case "select":
-      schema.type = "string";
-      if (values) schema.enum = values;
-      break;
-    case "multiselect":
-      schema.type = "array";
-      schema.items = values
-        ? { type: "string", enum: values }
-        : { type: "string" };
-      break;
-    case "json":
-      break;
-    default:
-      schema.type = "string";
-      if (field.pattern) schema.pattern = `^(?:${field.pattern})$`;
-  }
-  if (field.type === "resource" && field.resource) {
-    schema["x-termix-resource"] = field.resource;
-  }
-  if (field.type === "secret") schema.writeOnly = true;
-  return schema;
-}
-
-/** JSON Schema for a field list, for AI tools, MCP and OpenAPI. */
-export function toJsonSchema(
-  fields: readonly OperationField[] | undefined,
-  describe?: (field: OperationField) => string | undefined,
-): Record<string, unknown> {
-  const properties: Record<string, unknown> = {};
-  const required: string[] = [];
-  for (const field of fields ?? []) {
-    const schema = fieldSchema(field);
-    const description = describe?.(field);
-    if (description) schema.description = description;
-    properties[field.key] = schema;
-    if (field.required && field.default === undefined && !field.requires) {
-      required.push(field.key);
-    }
-  }
-  return { type: "object", properties, required, additionalProperties: false };
-}
@@ -68,11 +68,7 @@ import type {
  PluginSshKeyCredential,
  PluginSshKeyCredentialInput,
 } from "./backend.js";
-import type {
-  PluginOperationHandler,
-  PluginSyncHost,
-  SyncEntityRegistration,
-} from "./backend.js";
+import type { PluginSyncHost, SyncEntityRegistration } from "./backend.js";
 import type { PluginDatabase } from "./backend.js";
 import type {
  PluginExternalClientRequest,
@@ -359,10 +355,6 @@ export interface FakePluginContext {
  }>;
  /** The hub the plugin registered with ctx.notify.serve, if any. */
  notifyHub: { current: PluginNotifyHub | null };
-  /** Handlers from ctx.operations.register, by action id. */
-  operationHandlers: Map<string, PluginOperationHandler>;
-  /** Every ctx.operations.emit call. */
-  operationEvents: { eventId: string; payload: unknown; hostId?: number }[];
  /** Backing store behind ctx.secrets.get/set, keyed "<userId>:<key>". */
  secretStore: Map<string, string>;
  /** Every ctx.fetch call, in order. */
@@ -574,8 +566,6 @@ export function createFakeContext(
  const createdSshKeys: FakePluginContext["createdSshKeys"] = [];
  const notifications: FakePluginContext["notifications"] = [];
  const notifyHub: FakePluginContext["notifyHub"] = { current: null };
-  const operationHandlers: FakePluginContext["operationHandlers"] = new Map();
-  const operationEvents: FakePluginContext["operationEvents"] = [];
  const fetches: FakePluginContext["fetches"] = [];
  const processRuns: FakePluginContext["processRuns"] = [];
  const binaries: FakePluginContext["binaries"] = [];
@@ -1401,46 +1391,6 @@ export function createFakeContext(
      },
    },

-    operations: {
-      register: (id, handler) => {
-        operationHandlers.set(id, handler);
-      },
-      run: async (actionId, options = {}) => {
-        const handler = operationHandlers.get(actionId);
-        if (!handler) throw new Error(`No action "${actionId}"`);
-        const result = await handler.run(options.input ?? {}, {
-          hostId: options.hostId,
-          resourceKey: options.resourceKey,
-          runId: null,
-          dryRun: options.dryRun === true,
-          signal: new AbortController().signal,
-          log: () => {},
-        });
-        return { runId: null, status: "success", ...result };
-      },
-      invoke: async (actionId, options = {}) => {
-        const handler = operationHandlers.get(actionId);
-        if (!handler) throw new Error(`No action "${actionId}"`);
-        const result = await handler.run(options.input ?? {}, {
-          hostId: options.hostId,
-          resourceKey: options.resourceKey,
-          runId: null,
-          dryRun: options.dryRun === true,
-          signal: new AbortController().signal,
-          log: () => {},
-        });
-        return { runId: null, status: "success", ...result };
-      },
-      list: async () => ({
-        actions: manifest.contributes?.operations?.actions ?? [],
-      }),
-      emit: async (eventId, payload, options) => {
-        operationEvents.push({ eventId, payload, hostId: options?.hostId });
-      },
-      onEvent: () => () => {},
-      approvals: { provide: () => () => {} },
-    },
-
    notify: {
      channels: async () => {
        if (!actor) throw new Error("ctx.notify needs an acting user");
@@ -1604,8 +1554,6 @@ export function createFakeContext(
    createdSshKeys,
    notifications,
    notifyHub,
-    operationHandlers,
-    operationEvents,
    fetches,
    processRuns,
    binaries,
@@ -403,7 +403,6 @@ getDeviceId (value): () => string
 getErrorMessage (value): (error: unknown, fallback?: string) => string
 getExternalAutoProvision (value): () => Promise<{ enabled: boolean; }>
 getFolderAccess (value): (folder: string) => Promise<{ rules: FolderAccessRule[]; }>
-getFolderAuthOverride (value): (folder: string, protocol: string, sharedCopySyncId?: string) => Promise<{ folder: string; protocol: string; credentialId: number; }>
 getFolderDefaultsId (value): (name: string) => Promise<number>
 getHostAccess (value): (hostId: number, syncId?: string) => Promise<{ accessList: AccessRecord[]; isOwner?: boolean; }>
 getHostAuthOverride (value): (hostId: number, protocol: string, sharedCopySyncId?: string) => Promise<{ protocol: string; credentialId: number; }>
@@ -527,7 +526,7 @@ resolveHostTabType (value): (host: Host, preferredType?: TabType) => TabType
 resolveRemoteHostId (value): (syncId: string) => Promise<number>
 revokeAllUserSessions (value): (userId: string) => Promise<{ success: boolean; message: string; }>
 revokeCredentialAccess (value): (credentialId: number, accessId: number) => Promise<void>
-revokeFolderAccess (value): (ruleId: number, options?: { fromHosts?: boolean; }) => Promise<void>
+revokeFolderAccess (value): (ruleId: number) => Promise<void>
 revokeHostAccess (value): (hostId: number, accessId: number, syncId?: string) => Promise<{ success: boolean; }>
 revokeSession (value): (sessionId: string) => Promise<{ success: boolean; message: string; }>
 rightDockableIds (value): () => string[]
@@ -545,7 +544,6 @@ saveHostTags (value): (tags: string[]) => Promise<string[]>
 saveUserPreferences (value): (prefs: Partial<UserPreferences>) => Promise<void>
 setAllPluginChannels (value): (channel: PluginChannel) => Promise<{ changed: string[]; }>
 setDeveloperMode (value): (enabled: boolean) => Promise<void>
-setFolderAuthOverride (value): (folder: string, protocol: string, credentialId: number, sharedCopySyncId?: string) => Promise<{ success: boolean; folder: string; protocol: string; credentialId: number; }>
 setHostAuthOverride (value): (hostId: number, protocol: string, credentialId: number, sharedCopySyncId?: string) => Promise<{ success: boolean; protocol: string; credentialId: number; }>
 setNotificationPrivateEndpoints (value): (hosts: string[]) => Promise<string[]>
 setPluginOptions (value): (pluginId: string, options: { autoUpdate?: boolean; pinned?: boolean; channel?: PluginChannel; }) => Promise<{ autoUpdate: boolean; pinnedVersion: string; channel: PluginChannel; }>
@@ -537,38 +537,6 @@ describe("default look", () => {
    ).toMatchObject({ id: "look", defaultLook: true });
  });

-  it("leaves out new plugins with no usable release when pinning all", () => {
-    const stable = {
-      version: "1.0.0",
-      url: "https://x/a.tmxplug",
-      sha256: SHA,
-    };
-    const index = {
-      plugins: [
-        { id: "ready", versions: [stable] },
-        {
-          id: "beta-only",
-          versions: [],
-          prereleases: [{ ...stable, version: "1.0.0-beta.1" }],
-        },
-        {
-          id: "too-new",
-          versions: [],
-          gated: [{ ...stable, engine: { termix: ">=99.0.0" } }],
-        },
-      ],
-    };
-    expect(
-      pinsFromIndex(index, null, [], "26.11.1").map(
-        (pin: { id: string }) => pin.id,
-      ),
-    ).toEqual(["ready"]);
-    expect(() =>
-      pinsFromIndex(index, null, [{ id: "beta-only" }], "26.11.1"),
-    ).toThrow(/beta-only/);
-    expect(() => pinsFromIndex(index, ["beta-only"])).toThrow(/beta-only/);
-  });
-
  it("copies a local build's theme files", () => {
    const repo = tempDir();
    fs.mkdirSync(path.join(repo, "dist"), { recursive: true });
@@ -426,7 +426,6 @@ const ALLOWED = [
  "getFolderAccess",
  "getFolderDefaultsId",
  "getHostAccess",
-  "getFolderAuthOverride",
  "getHostAuthOverride",
  "getHostDefaultsLevel",
  "getHostEditorSection",
@@ -566,7 +565,6 @@ const ALLOWED = [
  "saveUserPreferences",
  "setAllPluginChannels",
  "setDeveloperMode",
-  "setFolderAuthOverride",
  "setHostAuthOverride",
  "setNotificationPrivateEndpoints",
  "setPluginOptions",
@@ -404,7 +404,6 @@ function watchBackend() {
    { cwd: root, stdio: ["ignore", "pipe", "inherit"] },
  );
  let first = true;
-  let restartQueued = false;
  let buffer = "";
  tsc.stdout.on("data", (chunk) => {
    buffer += chunk.toString();
@@ -424,21 +423,14 @@ function watchBackend() {
        ? "starting the backend"
        : "backend changed, restarting it";
      first = false;
-      if (restartQueued) continue;
-      restartQueued = true;
-      void queue(() => {
-        restartQueued = false;
-        return restartBackend(reason);
-      });
+      void queue(() => restartBackend(reason));
    }
  });
 }

 function watchSdk() {
-  let buildStarted = Date.now();
  const changed = createDebouncer(300, () =>
    queue(async () => {
-      buildStarted = Date.now();
      try {
        await run("npm", ["run", "build:sdk"]);
      } catch (error) {
@@ -448,16 +440,7 @@ function watchSdk() {
      await restartBackend("SDK changed, restarting the backend");
    }),
  );
-  // Windows also reports reads (access time), so only a file saved after the last build counts
-  watch(SDK_SRC, true, (_event, filename) => {
-    try {
-      const stat = fs.statSync(path.join(SDK_SRC, String(filename ?? "")));
-      if (stat.isDirectory() || stat.mtimeMs < buildStarted) return;
-    } catch {
-      // deleted or renamed, still a change
-    }
-    changed("sdk");
-  });
+  watch(SDK_SRC, true, () => changed("sdk"));
 }

 function watchElectron() {
@@ -597,18 +580,9 @@ function watchPlugins(dir) {
    queue(() => rebuildPlugin(byId.get(id))),
  );
  for (const plugin of plugins) {
-    // Only source folders, so node_modules and .git are never watched
-    const onEvent = (prefix) => (_event, filename) => {
-      const name = prefix
-        ? path.join(prefix, String(filename ?? ""))
-        : filename;
-      if (isPluginEdit(plugin.repo, name)) changed(plugin.id);
-    };
-    watch(plugin.repo, false, onEvent(""));
-    for (const sub of ["src", "locales", "migrations"]) {
-      const target = path.join(plugin.repo, sub);
-      if (fs.existsSync(target)) watch(target, true, onEvent(sub));
-    }
+    watch(plugin.repo, true, (_event, filename) => {
+      if (isPluginEdit(plugin.repo, filename)) changed(plugin.id);
+    });
  }
  log(`watching ${plugins.length} plugin(s) in ${dir}`);
 }
@@ -45,18 +45,6 @@ function buildTable(version, mobileVersion, mobileTag) {
  ].join("\n");
 }

-function buildFullBuilds(version) {
-  const base = `https://github.com/Termix-SSH/Termix/releases/download/v${version}`;
-  const link = (label, file) => `[${label}](${base}/${file})`;
-  return [
-    "The builds above include the standard plugins. The full builds include every official plugin, which helps on a network with no internet. You can still turn plugins on or off in the Plugins tab. Full builds are x64 only (universal on Mac):",
-    "",
-    `- Windows: ${link("EXE", "termix_windows_x64_full_nsis.exe")}`,
-    `- Linux: ${link("AppImage", "termix_linux_x64_full_appimage.AppImage")} · ${link("DEB", "termix_linux_x64_full_deb.deb")}`,
-    `- Mac: ${link("DMG", "termix_macos_universal_full_dmg.dmg")}`,
-  ].join("\n");
-}
-
 function buildBody({ version, mobileVersion, mobileTag, changelog }) {
  const notes = changelogSection(changelog, version);
  if (!notes) fail(`CHANGELOG.md has no notes for ${version}`);
@@ -74,8 +62,6 @@ function buildBody({ version, mobileVersion, mobileTag, changelog }) {
    "### Downloads",
    "",
    buildTable(version, mobileVersion, mobileTag),
-    "",
-    buildFullBuilds(version),
  ].join("\n");
 }

@@ -34,18 +34,6 @@ describe("buildBody", () => {
    );
  });

-  it("links the full builds", () => {
-    const body = buildBody({
-      version: "26.10.0",
-      mobileVersion: "1.2.0",
-      changelog: CHANGELOG,
-    });
-    expect(body).toContain("v26.10.0/termix_windows_x64_full_nsis.exe");
-    expect(body).toContain("v26.10.0/termix_linux_x64_full_appimage.AppImage");
-    expect(body).toContain("v26.10.0/termix_linux_x64_full_deb.deb");
-    expect(body).toContain("v26.10.0/termix_macos_universal_full_dmg.dmg");
-  });
-
  it("works for the real changelog", () => {
    const fs = require("fs");
    const body = buildBody({
@@ -278,15 +278,14 @@ function pluginsForProfile(plugins, profile) {
 * pin list, so fields the registry does not know (onboarding, tier) carry over;
 * a plugin new to the list starts in the full tier. coreVersion, when given,
 * skips releases whose engine.termix range does not include it, so the image
- * never ships a plugin its own core cannot run. With ids null, a plugin new to
- * the list that has no usable release (only betas, say) is left out.
+ * never ships a plugin its own core cannot run.
 */
 function pinsFromIndex(index, ids, current = [], coreVersion = null) {
  const plugins = Array.isArray(index?.plugins) ? index.plugins : [];
  const byId = new Map(plugins.map((plugin) => [plugin.id, plugin]));
  const currentById = new Map(current.map((entry) => [entry.id, entry]));
  const wanted = ids ?? plugins.map((plugin) => plugin.id);
-  const pins = [...wanted].sort().map((id) => {
+  return [...wanted].sort().map((id) => {
    const listed = byId.get(id);
    // gated holds releases that need a newer Termix than old builds check for.
    const latest = [...(listed?.versions ?? []), ...(listed?.gated ?? [])]
@@ -301,10 +300,7 @@ function pinsFromIndex(index, ids, current = [], coreVersion = null) {
          }),
      )
      .sort((a, b) => semver.rcompare(a.version, b.version))[0];
-    if (!latest) {
-      if (ids === null && !currentById.has(id)) return null;
-      throw new Error(`${id} is not in the registry index`);
-    }
+    if (!latest) throw new Error(`${id} is not in the registry index`);
    const onboarding = currentById.get(id)?.onboarding;
    const defaultLook = currentById.get(id)?.defaultLook === true;
    const tier = currentById.get(id)?.tier ?? "full";
@@ -318,7 +314,6 @@ function pinsFromIndex(index, ids, current = [], coreVersion = null) {
      ...(defaultLook ? { defaultLook } : {}),
    };
  });
-  return pins.filter(Boolean);
 }

 const LOCAL_FILES = [
@@ -4,7 +4,7 @@
 * re-released.
 *
 *   node scripts/pin-bundled-plugins.cjs          refresh the plugins already listed
- *   node scripts/pin-bundled-plugins.cjs --all    also add plugins new to the index that have a stable release (tier full)
+ *   node scripts/pin-bundled-plugins.cjs --all    also add plugins new to the index (tier full)
 *   --core-version X                              skip releases whose engine.termix excludes X
 *
 * The release workflow runs it with --all and the version being released.
@@ -30,7 +30,6 @@ import { registerAuditLogRoutes } from "./routes/audit-log-routes.js";
 import { syncForwarder } from "../sync/provider.js";
 import { syncChangeWatcher } from "../sync/server/change-watcher.js";
 import dashboardRoutes from "./routes/dashboard-routes.js";
-import operationsRoutes from "./routes/operations-routes.js";
 import {
  mountPluginApi,
  mountPluginLegacyPaths,
@@ -1628,7 +1627,6 @@ app.use("/ui-preferences", uiPreferencesRoutes);
 registerAuditLogRoutes(app, authenticateJWT);
 app.use("/sync", syncForwarder);
 app.use("/dashboard", dashboardRoutes);
-app.use("/operations", operationsRoutes);
 app.use("/plugins", pluginRoutes);
 app.use(
  "/plugin-assets",
@@ -484,19 +484,6 @@ async function initializeCompleteDatabase(): Promise<void> {
    );
    CREATE INDEX IF NOT EXISTS idx_folder_access_owner_folder ON folder_access (owner_user_id, folder);

-    CREATE TABLE IF NOT EXISTS shared_folder_auth_overrides (
-        id INTEGER PRIMARY KEY AUTOINCREMENT,
-        user_id TEXT NOT NULL,
-        folder TEXT NOT NULL,
-        protocol TEXT NOT NULL DEFAULT 'ssh',
-        credential_id INTEGER NOT NULL,
-        created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-        updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-        FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE,
-        FOREIGN KEY (credential_id) REFERENCES ssh_credentials (id) ON DELETE CASCADE
-    );
-    CREATE UNIQUE INDEX IF NOT EXISTS shared_folder_auth_overrides_user_folder_protocol_unique ON shared_folder_auth_overrides (user_id, folder, protocol);
-
    CREATE TABLE IF NOT EXISTS plugins (
        id TEXT PRIMARY KEY,
        name TEXT NOT NULL,
@@ -599,70 +586,6 @@ async function initializeCompleteDatabase(): Promise<void> {
        UNIQUE (role_name, permission)
    );

-    CREATE TABLE IF NOT EXISTS operation_runs (
-      id TEXT PRIMARY KEY,
-      action_id TEXT NOT NULL,
-      action_version INTEGER NOT NULL DEFAULT 1,
-      plugin_id TEXT NOT NULL,
-      plugin_version TEXT NOT NULL,
-      user_id TEXT REFERENCES users (id) ON DELETE SET NULL,
-      username TEXT NOT NULL,
-      origin TEXT NOT NULL,
-      host_id INTEGER,
-      host_name TEXT,
-      batch_id TEXT,
-      dry_run INTEGER NOT NULL DEFAULT 0,
-      risk TEXT NOT NULL,
-      status TEXT NOT NULL,
-      summary TEXT,
-      changed INTEGER,
-      input TEXT,
-      sealed_input TEXT,
-      output TEXT,
-      undo_input TEXT,
-      error TEXT,
-      error_code TEXT,
-      undo_of TEXT,
-      idempotency_key TEXT,
-      created_at TEXT NOT NULL,
-      started_at TEXT,
-      finished_at TEXT
-    );
-    CREATE INDEX IF NOT EXISTS idx_operation_runs_created ON operation_runs (created_at);
-    CREATE INDEX IF NOT EXISTS idx_operation_runs_user_created ON operation_runs (user_id, created_at);
-    CREATE INDEX IF NOT EXISTS idx_operation_runs_host_created ON operation_runs (host_id, created_at);
-    CREATE INDEX IF NOT EXISTS idx_operation_runs_status ON operation_runs (status);
-    CREATE INDEX IF NOT EXISTS idx_operation_runs_batch ON operation_runs (batch_id);
-
-    CREATE TABLE IF NOT EXISTS operation_approvals (
-      id TEXT PRIMARY KEY,
-      run_id TEXT NOT NULL REFERENCES operation_runs (id) ON DELETE CASCADE,
-      requested_by TEXT,
-      reason TEXT,
-      allow_self INTEGER NOT NULL DEFAULT 0,
-      status TEXT NOT NULL,
-      decided_by TEXT,
-      comment TEXT,
-      created_at TEXT NOT NULL,
-      expires_at TEXT NOT NULL,
-      decided_at TEXT
-    );
-    CREATE INDEX IF NOT EXISTS idx_operation_approvals_status ON operation_approvals (status, expires_at);
-    CREATE INDEX IF NOT EXISTS idx_operation_approvals_run ON operation_approvals (run_id);
-
-    CREATE TABLE IF NOT EXISTS operation_events (
-      id TEXT PRIMARY KEY,
-      event_id TEXT NOT NULL,
-      plugin_id TEXT NOT NULL,
-      host_id INTEGER,
-      severity TEXT,
-      payload TEXT,
-      run_id TEXT,
-      created_at TEXT NOT NULL
-    );
-    CREATE INDEX IF NOT EXISTS idx_operation_events_created ON operation_events (created_at);
-    CREATE INDEX IF NOT EXISTS idx_operation_events_host_created ON operation_events (host_id, created_at);
-
    CREATE TABLE IF NOT EXISTS api_keys (
        id TEXT PRIMARY KEY,
        user_id TEXT NOT NULL,
@@ -1025,7 +948,6 @@ const enforceUniqueUsernames = () => {

 const migrateSchema = () => {
  repairSnippetsColumns(sqlite);
-  addColumnIfNotExists("api_keys", "scopes", "TEXT");
  addColumnIfNotExists("user_preferences", "theme", "TEXT");
  addColumnIfNotExists("user_preferences", "font_size", "TEXT");
  addColumnIfNotExists("user_preferences", "accent_color", "TEXT");
@@ -1877,8 +1799,6 @@ async function saveMemoryDatabaseToFile(): Promise<void> {
  if (!memoryDatabase) return;

  try {
-    // Before the copy, so a write during the slow part below stays dirty.
-    DatabaseSaveTrigger.markClean();
    const buffer = memoryDatabase.serialize();

    if (!fs.existsSync(dataDir)) {
@@ -1899,10 +1819,11 @@ async function saveMemoryDatabaseToFile(): Promise<void> {
        encryptedDbPath,
      );
    } else {
-      await fs.promises.writeFile(dbPath, buffer);
+      fs.writeFileSync(dbPath, buffer);
    }
+
+    DatabaseSaveTrigger.markClean();
  } catch (error) {
-    DatabaseSaveTrigger.markDirty();
    databaseLogger.error("Failed to save in-memory database", error, {
      operation: "memory_db_save_failed",
      enableFileEncryption,
@@ -1921,8 +1842,7 @@ async function handlePostInitFileEncryption() {

      setInterval(() => {
        if (DatabaseSaveTrigger.isDirty) {
-          // Through the trigger so it waits for any save already running.
-          void DatabaseSaveTrigger.forceSave("periodic_save").catch(() => {});
+          saveMemoryDatabaseToFile();
        }
      }, 5 * 60 * 1000);
    }
@@ -490,38 +490,6 @@ export const sharedHostAuthOverrides = mysqlTable(
  ],
 );

-/**
- * A recipient's own login for the shared hosts in a folder ("Parent / Child")
- * and its subfolders. A host's own override still wins.
- */
-export const sharedFolderAuthOverrides = mysqlTable(
-  "shared_folder_auth_overrides",
-  {
-    id: int("id").autoincrement().primaryKey(),
-    userId: varchar("user_id", { length: 255 })
-      .notNull()
-      .references(() => users.id, { onDelete: "cascade" }),
-    folder: varchar("folder", { length: 255 }).notNull(),
-    protocol: varchar("protocol", { length: 255 }).notNull().default("ssh"),
-    credentialId: int("credential_id")
-      .notNull()
-      .references(() => sshCredentials.id, { onDelete: "cascade" }),
-    createdAt: text("created_at")
-      .notNull()
-      .default(sql`(CURRENT_TIMESTAMP)`),
-    updatedAt: text("updated_at")
-      .notNull()
-      .default(sql`(CURRENT_TIMESTAMP)`),
-  },
-  (table) => [
-    uniqueIndex("shared_folder_auth_overrides_user_folder_protocol_unique").on(
-      table.userId,
-      table.folder,
-      table.protocol,
-    ),
-  ],
-);
-
 export const sharedHostSecrets = mysqlTable(
  "shared_host_secrets",
  {
@@ -673,102 +641,10 @@ export const apiKeys = mysqlTable(
    expiresAt: text("expires_at"),
    lastUsedAt: text("last_used_at"),
    isActive: boolean("is_active").notNull().default(true),
-    // JSON list. Null means full access, which every older key has.
-    scopes: text("scopes"),
  },
  (table) => [index("idx_api_keys_user_id").on(table.userId)],
 );

-export const operationRuns = mysqlTable(
-  "operation_runs",
-  {
-    id: varchar("id", { length: 255 }).primaryKey(),
-    actionId: text("action_id").notNull(),
-    actionVersion: int("action_version").notNull().default(1),
-    pluginId: text("plugin_id").notNull(),
-    pluginVersion: text("plugin_version").notNull(),
-
-    // Nullable on purpose: history outlives the account, like audit_logs.
-    userId: varchar("user_id", { length: 255 }).references(() => users.id, { onDelete: "set null" }),
-    username: text("username").notNull(),
-
-    origin: text("origin").notNull(),
-    hostId: int("host_id"),
-    hostName: text("host_name"),
-    batchId: varchar("batch_id", { length: 255 }),
-    dryRun: boolean("dry_run").notNull().default(false),
-    risk: text("risk").notNull(),
-    status: varchar("status", { length: 255 }).notNull(),
-    summary: text("summary"),
-    changed: boolean("changed"),
-    input: text("input"),
-    // Only until the run ends, then wiped.
-    sealedInput: text("sealed_input"),
-    output: text("output"),
-    undoInput: text("undo_input"),
-    error: text("error"),
-    errorCode: text("error_code"),
-    undoOf: text("undo_of"),
-    idempotencyKey: text("idempotency_key"),
-    createdAt: varchar("created_at", { length: 255 }).notNull(),
-    startedAt: text("started_at"),
-    finishedAt: text("finished_at"),
-  },
-  (table) => [
-    index("idx_operation_runs_created").on(table.createdAt),
-    index("idx_operation_runs_user_created").on(table.userId, table.createdAt),
-    index("idx_operation_runs_host_created").on(table.hostId, table.createdAt),
-    index("idx_operation_runs_status").on(table.status),
-    index("idx_operation_runs_batch").on(table.batchId),
-  ],
-);
-
-export const operationApprovals = mysqlTable(
-  "operation_approvals",
-  {
-    id: varchar("id", { length: 255 }).primaryKey(),
-    runId: varchar("run_id", { length: 255 })
-      .notNull()
-      .references(() => operationRuns.id, { onDelete: "cascade" }),
-    requestedBy: text("requested_by"),
-    reason: text("reason"),
-    allowSelf: boolean("allow_self")
-      .notNull()
-      .default(false),
-    status: varchar("status", { length: 255 }).notNull(),
-    decidedBy: text("decided_by"),
-    comment: text("comment"),
-    createdAt: text("created_at").notNull(),
-    expiresAt: varchar("expires_at", { length: 255 }).notNull(),
-    decidedAt: text("decided_at"),
-  },
-  (table) => [
-    index("idx_operation_approvals_status").on(table.status, table.expiresAt),
-    index("idx_operation_approvals_run").on(table.runId),
-  ],
-);
-
-export const operationEvents = mysqlTable(
-  "operation_events",
-  {
-    id: varchar("id", { length: 255 }).primaryKey(),
-    eventId: text("event_id").notNull(),
-    pluginId: text("plugin_id").notNull(),
-    hostId: int("host_id"),
-    severity: text("severity"),
-    payload: text("payload"),
-    runId: text("run_id"),
-    createdAt: varchar("created_at", { length: 255 }).notNull(),
-  },
-  (table) => [
-    index("idx_operation_events_created").on(table.createdAt),
-    index("idx_operation_events_host_created").on(
-      table.hostId,
-      table.createdAt,
-    ),
-  ],
-);
-
 export const userOpenTabs = mysqlTable(
  "user_open_tabs",
  {
@@ -490,38 +490,6 @@ export const sharedHostAuthOverrides = pgTable(
  ],
 );

-/**
- * A recipient's own login for the shared hosts in a folder ("Parent / Child")
- * and its subfolders. A host's own override still wins.
- */
-export const sharedFolderAuthOverrides = pgTable(
-  "shared_folder_auth_overrides",
-  {
-    id: serial("id").primaryKey(),
-    userId: varchar("user_id", { length: 255 })
-      .notNull()
-      .references(() => users.id, { onDelete: "cascade" }),
-    folder: varchar("folder", { length: 255 }).notNull(),
-    protocol: varchar("protocol", { length: 255 }).notNull().default("ssh"),
-    credentialId: integer("credential_id")
-      .notNull()
-      .references(() => sshCredentials.id, { onDelete: "cascade" }),
-    createdAt: text("created_at")
-      .notNull()
-      .default(sql`CURRENT_TIMESTAMP`),
-    updatedAt: text("updated_at")
-      .notNull()
-      .default(sql`CURRENT_TIMESTAMP`),
-  },
-  (table) => [
-    uniqueIndex("shared_folder_auth_overrides_user_folder_protocol_unique").on(
-      table.userId,
-      table.folder,
-      table.protocol,
-    ),
-  ],
-);
-
 export const sharedHostSecrets = pgTable(
  "shared_host_secrets",
  {
@@ -673,102 +641,10 @@ export const apiKeys = pgTable(
    expiresAt: text("expires_at"),
    lastUsedAt: text("last_used_at"),
    isActive: boolean("is_active").notNull().default(true),
-    // JSON list. Null means full access, which every older key has.
-    scopes: text("scopes"),
  },
  (table) => [index("idx_api_keys_user_id").on(table.userId)],
 );

-export const operationRuns = pgTable(
-  "operation_runs",
-  {
-    id: varchar("id", { length: 255 }).primaryKey(),
-    actionId: text("action_id").notNull(),
-    actionVersion: integer("action_version").notNull().default(1),
-    pluginId: text("plugin_id").notNull(),
-    pluginVersion: text("plugin_version").notNull(),
-
-    // Nullable on purpose: history outlives the account, like audit_logs.
-    userId: varchar("user_id", { length: 255 }).references(() => users.id, { onDelete: "set null" }),
-    username: text("username").notNull(),
-
-    origin: text("origin").notNull(),
-    hostId: integer("host_id"),
-    hostName: text("host_name"),
-    batchId: varchar("batch_id", { length: 255 }),
-    dryRun: boolean("dry_run").notNull().default(false),
-    risk: text("risk").notNull(),
-    status: varchar("status", { length: 255 }).notNull(),
-    summary: text("summary"),
-    changed: boolean("changed"),
-    input: text("input"),
-    // Only until the run ends, then wiped.
-    sealedInput: text("sealed_input"),
-    output: text("output"),
-    undoInput: text("undo_input"),
-    error: text("error"),
-    errorCode: text("error_code"),
-    undoOf: text("undo_of"),
-    idempotencyKey: text("idempotency_key"),
-    createdAt: varchar("created_at", { length: 255 }).notNull(),
-    startedAt: text("started_at"),
-    finishedAt: text("finished_at"),
-  },
-  (table) => [
-    index("idx_operation_runs_created").on(table.createdAt),
-    index("idx_operation_runs_user_created").on(table.userId, table.createdAt),
-    index("idx_operation_runs_host_created").on(table.hostId, table.createdAt),
-    index("idx_operation_runs_status").on(table.status),
-    index("idx_operation_runs_batch").on(table.batchId),
-  ],
-);
-
-export const operationApprovals = pgTable(
-  "operation_approvals",
-  {
-    id: varchar("id", { length: 255 }).primaryKey(),
-    runId: varchar("run_id", { length: 255 })
-      .notNull()
-      .references(() => operationRuns.id, { onDelete: "cascade" }),
-    requestedBy: text("requested_by"),
-    reason: text("reason"),
-    allowSelf: boolean("allow_self")
-      .notNull()
-      .default(false),
-    status: varchar("status", { length: 255 }).notNull(),
-    decidedBy: text("decided_by"),
-    comment: text("comment"),
-    createdAt: text("created_at").notNull(),
-    expiresAt: varchar("expires_at", { length: 255 }).notNull(),
-    decidedAt: text("decided_at"),
-  },
-  (table) => [
-    index("idx_operation_approvals_status").on(table.status, table.expiresAt),
-    index("idx_operation_approvals_run").on(table.runId),
-  ],
-);
-
-export const operationEvents = pgTable(
-  "operation_events",
-  {
-    id: varchar("id", { length: 255 }).primaryKey(),
-    eventId: text("event_id").notNull(),
-    pluginId: text("plugin_id").notNull(),
-    hostId: integer("host_id"),
-    severity: text("severity"),
-    payload: text("payload"),
-    runId: text("run_id"),
-    createdAt: varchar("created_at", { length: 255 }).notNull(),
-  },
-  (table) => [
-    index("idx_operation_events_created").on(table.createdAt),
-    index("idx_operation_events_host_created").on(
-      table.hostId,
-      table.createdAt,
-    ),
-  ],
-);
-
 export const userOpenTabs = pgTable(
  "user_open_tabs",
  {
@@ -480,38 +480,6 @@ export const sharedHostAuthOverrides = sqliteTable(
  ],
 );

-/**
- * A recipient's own login for the shared hosts in a folder ("Parent / Child")
- * and its subfolders. A host's own override still wins.
- */
-export const sharedFolderAuthOverrides = sqliteTable(
-  "shared_folder_auth_overrides",
-  {
-    id: integer("id").primaryKey({ autoIncrement: true }),
-    userId: text("user_id")
-      .notNull()
-      .references(() => users.id, { onDelete: "cascade" }),
-    folder: text("folder").notNull(),
-    protocol: text("protocol").notNull().default("ssh"),
-    credentialId: integer("credential_id")
-      .notNull()
-      .references(() => sshCredentials.id, { onDelete: "cascade" }),
-    createdAt: text("created_at")
-      .notNull()
-      .default(sql`CURRENT_TIMESTAMP`),
-    updatedAt: text("updated_at")
-      .notNull()
-      .default(sql`CURRENT_TIMESTAMP`),
-  },
-  (table) => [
-    uniqueIndex("shared_folder_auth_overrides_user_folder_protocol_unique").on(
-      table.userId,
-      table.folder,
-      table.protocol,
-    ),
-  ],
-);
-
 export const sharedHostSecrets = sqliteTable(
  "shared_host_secrets",
  {
@@ -663,102 +631,10 @@ export const apiKeys = sqliteTable(
    expiresAt: text("expires_at"),
    lastUsedAt: text("last_used_at"),
    isActive: integer("is_active", { mode: "boolean" }).notNull().default(true),
-    // JSON list. Null means full access, which every older key has.
-    scopes: text("scopes"),
  },
  (table) => [index("idx_api_keys_user_id").on(table.userId)],
 );

-export const operationRuns = sqliteTable(
-  "operation_runs",
-  {
-    id: text("id").primaryKey(),
-    actionId: text("action_id").notNull(),
-    actionVersion: integer("action_version").notNull().default(1),
-    pluginId: text("plugin_id").notNull(),
-    pluginVersion: text("plugin_version").notNull(),
-
-    // Nullable on purpose: history outlives the account, like audit_logs.
-    userId: text("user_id").references(() => users.id, { onDelete: "set null" }),
-    username: text("username").notNull(),
-
-    origin: text("origin").notNull(),
-    hostId: integer("host_id"),
-    hostName: text("host_name"),
-    batchId: text("batch_id"),
-    dryRun: integer("dry_run", { mode: "boolean" }).notNull().default(false),
-    risk: text("risk").notNull(),
-    status: text("status").notNull(),
-    summary: text("summary"),
-    changed: integer("changed", { mode: "boolean" }),
-    input: text("input"),
-    // Only until the run ends, then wiped.
-    sealedInput: text("sealed_input"),
-    output: text("output"),
-    undoInput: text("undo_input"),
-    error: text("error"),
-    errorCode: text("error_code"),
-    undoOf: text("undo_of"),
-    idempotencyKey: text("idempotency_key"),
-    createdAt: text("created_at").notNull(),
-    startedAt: text("started_at"),
-    finishedAt: text("finished_at"),
-  },
-  (table) => [
-    index("idx_operation_runs_created").on(table.createdAt),
-    index("idx_operation_runs_user_created").on(table.userId, table.createdAt),
-    index("idx_operation_runs_host_created").on(table.hostId, table.createdAt),
-    index("idx_operation_runs_status").on(table.status),
-    index("idx_operation_runs_batch").on(table.batchId),
-  ],
-);
-
-export const operationApprovals = sqliteTable(
-  "operation_approvals",
-  {
-    id: text("id").primaryKey(),
-    runId: text("run_id")
-      .notNull()
-      .references(() => operationRuns.id, { onDelete: "cascade" }),
-    requestedBy: text("requested_by"),
-    reason: text("reason"),
-    allowSelf: integer("allow_self", { mode: "boolean" })
-      .notNull()
-      .default(false),
-    status: text("status").notNull(),
-    decidedBy: text("decided_by"),
-    comment: text("comment"),
-    createdAt: text("created_at").notNull(),
-    expiresAt: text("expires_at").notNull(),
-    decidedAt: text("decided_at"),
-  },
-  (table) => [
-    index("idx_operation_approvals_status").on(table.status, table.expiresAt),
-    index("idx_operation_approvals_run").on(table.runId),
-  ],
-);
-
-export const operationEvents = sqliteTable(
-  "operation_events",
-  {
-    id: text("id").primaryKey(),
-    eventId: text("event_id").notNull(),
-    pluginId: text("plugin_id").notNull(),
-    hostId: integer("host_id"),
-    severity: text("severity"),
-    payload: text("payload"),
-    runId: text("run_id"),
-    createdAt: text("created_at").notNull(),
-  },
-  (table) => [
-    index("idx_operation_events_created").on(table.createdAt),
-    index("idx_operation_events_host_created").on(
-      table.hostId,
-      table.createdAt,
-    ),
-  ],
-);
-
 export const userOpenTabs = sqliteTable(
  "user_open_tabs",
  {
@@ -13,7 +13,6 @@ import { HostSidebarPreferenceRepository } from "./host-sidebar-preference-repos
 import { CredentialSidebarPreferenceRepository } from "./credential-sidebar-preference-repository.js";
 import { UiPreferenceRepository } from "./ui-preference-repository.js";
 import { OpenTabRepository } from "./open-tab-repository.js";
-import { OperationRepository } from "./operation-repository.js";
 import { PluginRepository } from "./plugin-repository.js";
 import { PluginStorageRepository } from "./plugin-storage-repository.js";
 import { PluginSettingsRepository } from "./plugin-settings-repository.js";
@@ -32,7 +31,6 @@ import { FolderAccessRepository } from "./folder-access-repository.js";
 import { SettingsRepository } from "./settings-repository.js";
 import { HostProtocolAuthRepository } from "./host-protocol-auth-repository.js";
 import { SharedHostAuthOverrideRepository } from "./shared-host-auth-override-repository.js";
-import { SharedFolderAuthOverrideRepository } from "./shared-folder-auth-override-repository.js";
 import { SharedHostSecretsRepository } from "./shared-host-secrets-repository.js";
 import { SshCredentialUsageRepository } from "./ssh-credential-usage-repository.js";
 import { TrustedDeviceRepository } from "./trusted-device-repository.js";
@@ -135,14 +133,6 @@ export function createCurrentAuditLogRepository(): AuditLogRepository {
  );
 }

-export function createCurrentOperationRepository(): OperationRepository {
-  return new OperationRepository(
-    createCurrentRepositoryContext(),
-    // Rows land on every run. A rollout saves once on its own when it starts.
-    createCurrentRepositoryLazyWriteHook("operation_repository_write"),
-  );
-}
-
 export function createCurrentCredentialRepository(): CredentialRepository {
  return new CredentialRepository(
    createCurrentRepositoryContext(),
@@ -326,15 +316,6 @@ export function createCurrentSharedHostAuthOverrideRepository(): SharedHostAuthO
  );
 }

-export function createCurrentSharedFolderAuthOverrideRepository(): SharedFolderAuthOverrideRepository {
-  return new SharedFolderAuthOverrideRepository(
-    createCurrentRepositoryContext(),
-    createCurrentRepositoryWriteHook(
-      "shared_folder_auth_override_repository_write",
-    ),
-  );
-}
-
 export function createCurrentSshCredentialUsageRepository(): SshCredentialUsageRepository {
  return new SshCredentialUsageRepository(
    createCurrentRepositoryContext(),
@@ -1,255 +0,0 @@
-import { and, desc, eq, inArray, lt, or, sql } from "drizzle-orm";
-import {
-  operationApprovals,
-  operationEvents,
-  operationRuns,
-} from "../db/schema.js";
-import type { DatabaseContext } from "./database-context.js";
-import { countValue, rowsAffected } from "./mutation-result.js";
-
-export type OperationRunRecord = typeof operationRuns.$inferSelect;
-export type NewOperationRunRecord = typeof operationRuns.$inferInsert;
-export type OperationApprovalRecord = typeof operationApprovals.$inferSelect;
-export type NewOperationApprovalRecord = typeof operationApprovals.$inferInsert;
-export type OperationEventRecord = typeof operationEvents.$inferSelect;
-export type NewOperationEventRecord = typeof operationEvents.$inferInsert;
-
-export interface OperationRunFilters {
-  userId?: string;
-  /** Rows also visible because the viewer owns the host. */
-  orHostIds?: number[];
-  hostId?: number;
-  actionId?: string;
-  status?: string;
-  batchId?: string;
-  before?: string;
-}
-
-const MAX_PAGE = 200;
-
-export class OperationRepository {
-  constructor(
-    private readonly context: DatabaseContext,
-    private readonly onWrite?: () => void | Promise<void>,
-  ) {}
-
-  async insertRun(run: NewOperationRunRecord): Promise<void> {
-    await this.context.drizzle.insert(operationRuns).values(run);
-    await this.onWrite?.();
-  }
-
-  async findRun(id: string): Promise<OperationRunRecord | null> {
-    const rows = await this.context.drizzle
-      .select()
-      .from(operationRuns)
-      .where(eq(operationRuns.id, id))
-      .limit(1);
-    return rows[0] ?? null;
-  }
-
-  async findByIdempotencyKey(
-    userId: string,
-    key: string,
-  ): Promise<OperationRunRecord | null> {
-    const rows = await this.context.drizzle
-      .select()
-      .from(operationRuns)
-      .where(
-        and(
-          eq(operationRuns.userId, userId),
-          eq(operationRuns.idempotencyKey, key),
-        ),
-      )
-      .limit(1);
-    return rows[0] ?? null;
-  }
-
-  async listRuns(
-    filters: OperationRunFilters,
-    limit = 50,
-  ): Promise<OperationRunRecord[]> {
-    const owner = filters.userId
-      ? filters.orHostIds?.length
-        ? or(
-            eq(operationRuns.userId, filters.userId),
-            inArray(operationRuns.hostId, filters.orHostIds),
-          )
-        : eq(operationRuns.userId, filters.userId)
-      : undefined;
-    const conditions = [
-      owner,
-      filters.hostId !== undefined
-        ? eq(operationRuns.hostId, filters.hostId)
-        : undefined,
-      filters.actionId
-        ? eq(operationRuns.actionId, filters.actionId)
-        : undefined,
-      filters.status ? eq(operationRuns.status, filters.status) : undefined,
-      filters.batchId ? eq(operationRuns.batchId, filters.batchId) : undefined,
-      filters.before ? lt(operationRuns.createdAt, filters.before) : undefined,
-    ].filter((condition) => condition !== undefined);
-    return this.context.drizzle
-      .select()
-      .from(operationRuns)
-      .where(conditions.length > 0 ? and(...conditions) : undefined)
-      .orderBy(desc(operationRuns.createdAt))
-      .limit(Math.min(Math.max(limit, 1), MAX_PAGE));
-  }
-
-  /** Moves a run on only from the status given, so two writers cannot race. */
-  async updateRunFrom(
-    id: string,
-    fromStatus: string,
-    patch: Partial<NewOperationRunRecord>,
-  ): Promise<boolean> {
-    const result = await this.context.drizzle
-      .update(operationRuns)
-      .set(patch)
-      .where(
-        and(eq(operationRuns.id, id), eq(operationRuns.status, fromStatus)),
-      );
-    await this.onWrite?.();
-    return rowsAffected(result) > 0;
-  }
-
-  /** Anything still running when the server stopped has an unknown outcome. */
-  async markRunningInterrupted(finishedAt: string): Promise<number> {
-    const result = await this.context.drizzle
-      .update(operationRuns)
-      .set({
-        status: "interrupted",
-        finishedAt,
-        sealedInput: null,
-        error: "The server stopped during this run. Check the host.",
-      })
-      .where(eq(operationRuns.status, "running"));
-    await this.onWrite?.();
-    return rowsAffected(result);
-  }
-
-  async insertApproval(approval: NewOperationApprovalRecord): Promise<void> {
-    await this.context.drizzle.insert(operationApprovals).values(approval);
-    await this.onWrite?.();
-  }
-
-  async findApproval(id: string): Promise<OperationApprovalRecord | null> {
-    const rows = await this.context.drizzle
-      .select()
-      .from(operationApprovals)
-      .where(eq(operationApprovals.id, id))
-      .limit(1);
-    return rows[0] ?? null;
-  }
-
-  async findApprovalForRun(
-    runId: string,
-  ): Promise<OperationApprovalRecord | null> {
-    const rows = await this.context.drizzle
-      .select()
-      .from(operationApprovals)
-      .where(eq(operationApprovals.runId, runId))
-      .limit(1);
-    return rows[0] ?? null;
-  }
-
-  async listPendingApprovals(limit = 100): Promise<OperationApprovalRecord[]> {
-    return this.context.drizzle
-      .select()
-      .from(operationApprovals)
-      .where(eq(operationApprovals.status, "pending"))
-      .orderBy(desc(operationApprovals.createdAt))
-      .limit(Math.min(Math.max(limit, 1), MAX_PAGE));
-  }
-
-  /** One shot: only the first decision on a pending row wins. */
-  async decideApproval(
-    id: string,
-    status: "approved" | "rejected" | "expired",
-    decidedBy: string | null,
-    comment: string | null,
-    decidedAt: string,
-  ): Promise<boolean> {
-    const result = await this.context.drizzle
-      .update(operationApprovals)
-      .set({ status, decidedBy, comment, decidedAt })
-      .where(
-        and(
-          eq(operationApprovals.id, id),
-          eq(operationApprovals.status, "pending"),
-        ),
-      );
-    await this.onWrite?.();
-    return rowsAffected(result) > 0;
-  }
-
-  async listExpiredApprovals(now: string): Promise<OperationApprovalRecord[]> {
-    return this.context.drizzle
-      .select()
-      .from(operationApprovals)
-      .where(
-        and(
-          eq(operationApprovals.status, "pending"),
-          lt(operationApprovals.expiresAt, now),
-        ),
-      )
-      .limit(MAX_PAGE);
-  }
-
-  async insertEvent(event: NewOperationEventRecord): Promise<void> {
-    await this.context.drizzle.insert(operationEvents).values(event);
-    await this.onWrite?.();
-  }
-
-  async listEvents(
-    filters: { hostId?: number; before?: string },
-    limit = 50,
-  ): Promise<OperationEventRecord[]> {
-    const conditions = [
-      filters.hostId !== undefined
-        ? eq(operationEvents.hostId, filters.hostId)
-        : undefined,
-      filters.before
-        ? lt(operationEvents.createdAt, filters.before)
-        : undefined,
-    ].filter((condition) => condition !== undefined);
-    return this.context.drizzle
-      .select()
-      .from(operationEvents)
-      .where(conditions.length > 0 ? and(...conditions) : undefined)
-      .orderBy(desc(operationEvents.createdAt))
-      .limit(Math.min(Math.max(limit, 1), MAX_PAGE));
-  }
-
-  /** Drops rows older than the cutoff, finished runs only. */
-  async prune(before: string): Promise<number> {
-    const runs = await this.context.drizzle
-      .delete(operationRuns)
-      .where(
-        and(
-          lt(operationRuns.createdAt, before),
-          sql`${operationRuns.status} NOT IN ('running', 'pending_approval')`,
-        ),
-      );
-    const events = await this.context.drizzle
-      .delete(operationEvents)
-      .where(lt(operationEvents.createdAt, before));
-    await this.onWrite?.();
-    return rowsAffected(runs) + rowsAffected(events);
-  }
-
-  async countRuns(): Promise<number> {
-    const rows = await this.context.drizzle
-      .select({ value: sql<number>`count(*)` })
-      .from(operationRuns);
-    return countValue(rows[0]?.value);
-  }
-
-  /** History outlives the account, but the name goes with it. */
-  async anonymizeUser(userId: string): Promise<void> {
-    await this.context.drizzle
-      .update(operationRuns)
-      .set({ username: "deleted user" })
-      .where(eq(operationRuns.userId, userId));
-    await this.onWrite?.();
-  }
-}
@@ -1,115 +0,0 @@
-import { and, eq, inArray } from "drizzle-orm";
-import type { AuthOverrideProtocol } from "../../../types/auth-protocols.js";
-import { sharedFolderAuthOverrides } from "../db/schema.js";
-import type { DatabaseContext } from "./database-context.js";
-import { deleteReturning, upsert } from "./returning.js";
-
-/** "A / B / C" and the folders above it, closest first. */
-export function folderAndParents(folder: string | null | undefined): string[] {
-  const parts = (folder ?? "")
-    .split(" / ")
-    .map((part) => part.trim())
-    .filter(Boolean);
-  const out: string[] = [];
-  for (let i = parts.length; i > 0; i--) {
-    out.push(parts.slice(0, i).join(" / "));
-  }
-  return out;
-}
-
-export class SharedFolderAuthOverrideRepository {
-  constructor(
-    private readonly context: DatabaseContext,
-    private readonly onWrite?: () => void | Promise<void>,
-  ) {}
-
-  async findCredentialId(
-    userId: string,
-    folder: string,
-    protocol: AuthOverrideProtocol,
-  ): Promise<number | null> {
-    const rows = await this.context.drizzle
-      .select({ credentialId: sharedFolderAuthOverrides.credentialId })
-      .from(sharedFolderAuthOverrides)
-      .where(
-        and(
-          eq(sharedFolderAuthOverrides.userId, userId),
-          eq(sharedFolderAuthOverrides.folder, folder),
-          eq(sharedFolderAuthOverrides.protocol, protocol),
-        ),
-      )
-      .limit(1);
-    return rows[0]?.credentialId ?? null;
-  }
-
-  /**
-   * The login set on the host's folder or the closest folder above it, for
-   * one protocol. Null when none is set.
-   */
-  async findClosest(
-    userId: string,
-    hostFolder: string | null | undefined,
-    protocol: AuthOverrideProtocol,
-  ): Promise<{ folder: string; credentialId: number } | null> {
-    const folders = folderAndParents(hostFolder);
-    if (folders.length === 0) return null;
-    const rows = await this.context.drizzle
-      .select({
-        folder: sharedFolderAuthOverrides.folder,
-        credentialId: sharedFolderAuthOverrides.credentialId,
-      })
-      .from(sharedFolderAuthOverrides)
-      .where(
-        and(
-          eq(sharedFolderAuthOverrides.userId, userId),
-          eq(sharedFolderAuthOverrides.protocol, protocol),
-          inArray(sharedFolderAuthOverrides.folder, folders),
-        ),
-      );
-    for (const folder of folders) {
-      const row = rows.find((candidate) => candidate.folder === folder);
-      if (row) return row;
-    }
-    return null;
-  }
-
-  async setCredential(
-    userId: string,
-    folder: string,
-    protocol: AuthOverrideProtocol,
-    credentialId: number,
-  ): Promise<void> {
-    await upsert(
-      this.context,
-      sharedFolderAuthOverrides,
-      { userId, folder, protocol, credentialId },
-      {
-        target: [
-          sharedFolderAuthOverrides.userId,
-          sharedFolderAuthOverrides.folder,
-          sharedFolderAuthOverrides.protocol,
-        ],
-        set: { credentialId, updatedAt: new Date().toISOString() },
-      },
-    );
-    await this.onWrite?.();
-  }
-
-  async clearCredential(
-    userId: string,
-    folder: string,
-    protocol: AuthOverrideProtocol,
-  ): Promise<boolean> {
-    const rows = await deleteReturning(
-      this.context,
-      sharedFolderAuthOverrides,
-      and(
-        eq(sharedFolderAuthOverrides.userId, userId),
-        eq(sharedFolderAuthOverrides.folder, folder),
-        eq(sharedFolderAuthOverrides.protocol, protocol),
-      ),
-    );
-    if (rows.length > 0) await this.onWrite?.();
-    return rows.length > 0;
-  }
-}
@@ -3,7 +3,6 @@ import { recentActivity } from "../../plugins/activity-provider.js";
 import {
  createCurrentApiKeyRepository,
  createCurrentAuditLogRepository,
-  createCurrentOperationRepository,
  createCurrentCredentialRepository,
  createCurrentHostFolderRepository,
  createCurrentHostRepository,
@@ -62,7 +61,6 @@ export async function deleteUserAndRelatedData(

    await createCurrentRoleRepository().removeAllRolesFromUser(userId);
    await createCurrentAuditLogRepository().anonymizeByUserId(userId);
-    await createCurrentOperationRepository().anonymizeUser(userId);

    await createCurrentSshCredentialUsageRepository().deleteByUserId(userId);

@@ -1,760 +0,0 @@
-import express, { type Request, type Response } from "express";
-import type {
-  ResourceListResult,
-  SignalResult,
-} from "@termix-ssh/plugin-sdk/operations";
-import { AuthManager } from "../../utils/auth-manager.js";
-import { PermissionManager } from "../../utils/permission-manager.js";
-import { databaseLogger } from "../../utils/logger.js";
-import { getErrorMessage } from "../../utils/error-message.js";
-import { createCurrentOperationRepository } from "../repositories/factory.js";
-import type { OperationRunRecord } from "../repositories/operation-repository.js";
-import { buildCatalog } from "../../operations/catalog.js";
-import {
-  cancelOperationRun,
-  decideOperationApproval,
-  OperationError,
-  runOperation,
-} from "../../operations/gate.js";
-import { getAction } from "../../operations/registry.js";
-import {
-  flattenResourceRows,
-  readAcrossHosts,
-} from "../../operations/resources.js";
-import type { ActorOrigin } from "../../plugins/actor.js";
-
-const router = express.Router();
-const authenticateJWT = AuthManager.getInstance().createAuthMiddleware();
-const permissions = PermissionManager.getInstance();
-
-/** Sees every run on the server, not only their own. */
-export const VIEW_ALL_RUNS = "admin.operations.view";
-
-type OperationsRequest = Request & {
-  userId: string;
-  apiKeyId?: string;
-  apiKeyScopes?: string[] | null;
-  actingAdminUserId?: string;
-};
-
-function originOf(req: OperationsRequest): ActorOrigin {
-  return { kind: req.apiKeyId ? "api" : "ui" };
-}
-
-function sendError(res: Response, error: unknown, operation: string): void {
-  if (error instanceof OperationError) {
-    res.status(error.status).json({
-      error: error.message,
-      code: error.code,
-      details: error.details,
-    });
-    return;
-  }
-  databaseLogger.error("Operations route failed", error, { operation });
-  res.status(500).json({ error: getErrorMessage(error, "Request failed") });
-}
-
-function parseJson(text: string | null): unknown {
-  if (!text) return undefined;
-  try {
-    return JSON.parse(text);
-  } catch {
-    return undefined;
-  }
-}
-
-/** Never includes the sealed input. */
-function publicRun(run: OperationRunRecord) {
-  return {
-    id: run.id,
-    actionId: run.actionId,
-    pluginId: run.pluginId,
-    pluginVersion: run.pluginVersion,
-    userId: run.userId,
-    username: run.username,
-    origin: parseJson(run.origin),
-    hostId: run.hostId,
-    hostName: run.hostName,
-    batchId: run.batchId,
-    dryRun: run.dryRun,
-    risk: run.risk,
-    status: run.status,
-    summary: run.summary,
-    changed: run.changed,
-    input: parseJson(run.input),
-    output: parseJson(run.output),
-    undoAvailable: run.undoInput !== null,
-    error: run.error,
-    errorCode: run.errorCode,
-    undoOf: run.undoOf,
-    createdAt: run.createdAt,
-    startedAt: run.startedAt,
-    finishedAt: run.finishedAt,
-  };
-}
-
-async function canSeeRun(
-  run: OperationRunRecord,
-  userId: string,
-): Promise<boolean> {
-  if (run.userId === userId) return true;
-  if (await permissions.hasPermission(userId, VIEW_ALL_RUNS)) return true;
-  if (run.hostId === null) return false;
-  const access = await permissions.canAccessHost(userId, run.hostId, "manage");
-  return access.hasAccess;
-}
-
-function hostIdsFrom(value: unknown): number[] | undefined {
-  if (typeof value !== "string" || value === "") return undefined;
-  const ids = value
-    .split(",")
-    .map(Number)
-    .filter((id) => Number.isInteger(id));
-  return ids.length > 0 ? ids : undefined;
-}
-
-function limitFrom(value: unknown): number | undefined {
-  const limit = Number(value);
-  return Number.isInteger(limit) && limit > 0 ? limit : undefined;
-}
-
-/**
- * @openapi
- * /operations/catalog:
- *   get:
- *     summary: List what this user can do
- *     description: Every action, event, resource and signal from running plugins that the caller has permission for, with titles in the requested language.
- *     tags:
- *       - Operations
- *     parameters:
- *       - in: query
- *         name: lang
- *         schema:
- *           type: string
- *       - in: query
- *         name: surface
- *         schema:
- *           type: string
- *           enum: [assistant, mcp, palette, automations, mobile, cli]
- *     responses:
- *       200:
- *         description: The catalog.
- */
-router.get("/catalog", authenticateJWT, async (req, res) => {
-  const { userId } = req as OperationsRequest;
-  try {
-    res.json(
-      await buildCatalog({
-        userId,
-        lang: typeof req.query.lang === "string" ? req.query.lang : undefined,
-        surface:
-          typeof req.query.surface === "string"
-            ? (req.query.surface as never)
-            : undefined,
-      }),
-    );
-  } catch (error) {
-    sendError(res, error, "operations_catalog");
-  }
-});
-
-/**
- * @openapi
- * /operations/catalog/{id}:
- *   get:
- *     summary: Describe one action
- *     tags:
- *       - Operations
- *     parameters:
- *       - in: path
- *         name: id
- *         required: true
- *         schema:
- *           type: string
- *     responses:
- *       200:
- *         description: The action.
- *       404:
- *         description: No such action, or the caller may not use it.
- */
-router.get("/catalog/:id", authenticateJWT, async (req, res) => {
-  const { userId } = req as OperationsRequest;
-  try {
-    const catalog = await buildCatalog({
-      userId,
-      lang: typeof req.query.lang === "string" ? req.query.lang : undefined,
-    });
-    const action = catalog.actions.find((entry) => entry.id === req.params.id);
-    if (!action) {
-      res.status(404).json({ error: "Action not found" });
-      return;
-    }
-    res.json(action);
-  } catch (error) {
-    sendError(res, error, "operations_catalog_action");
-  }
-});
-
-/**
- * @openapi
- * /operations/runs:
- *   get:
- *     summary: List runs
- *     description: The caller's own runs, runs on hosts they manage, or every run with the view permission.
- *     tags:
- *       - Operations
- *     parameters:
- *       - in: query
- *         name: hostId
- *         schema:
- *           type: integer
- *       - in: query
- *         name: actionId
- *         schema:
- *           type: string
- *       - in: query
- *         name: status
- *         schema:
- *           type: string
- *       - in: query
- *         name: batchId
- *         schema:
- *           type: string
- *       - in: query
- *         name: before
- *         schema:
- *           type: string
- *       - in: query
- *         name: limit
- *         schema:
- *           type: integer
- *     responses:
- *       200:
- *         description: Runs, newest first.
- */
-router.get("/runs", authenticateJWT, async (req, res) => {
-  const { userId } = req as OperationsRequest;
-  try {
-    const viewAll = await permissions.hasPermission(userId, VIEW_ALL_RUNS);
-    const hostId = limitFrom(req.query.hostId);
-    let managed = false;
-    if (!viewAll && hostId !== undefined) {
-      managed = (await permissions.canAccessHost(userId, hostId, "manage"))
-        .hasAccess;
-    }
-    const runs = await createCurrentOperationRepository().listRuns(
-      {
-        userId: viewAll || managed ? undefined : userId,
-        hostId,
-        actionId:
-          typeof req.query.actionId === "string"
-            ? req.query.actionId
-            : undefined,
-        status:
-          typeof req.query.status === "string" ? req.query.status : undefined,
-        batchId:
-          typeof req.query.batchId === "string" ? req.query.batchId : undefined,
-        before:
-          typeof req.query.before === "string" ? req.query.before : undefined,
-      },
-      limitFrom(req.query.limit),
-    );
-    res.json({ runs: runs.map(publicRun) });
-  } catch (error) {
-    sendError(res, error, "operations_runs");
-  }
-});
-
-/**
- * @openapi
- * /operations/runs/{id}:
- *   get:
- *     summary: Get a run
- *     tags:
- *       - Operations
- *     parameters:
- *       - in: path
- *         name: id
- *         required: true
- *         schema:
- *           type: string
- *     responses:
- *       200:
- *         description: The run.
- *       404:
- *         description: Not found, or not visible to the caller.
- */
-router.get("/runs/:id", authenticateJWT, async (req, res) => {
-  const { userId } = req as OperationsRequest;
-  try {
-    const run = await createCurrentOperationRepository().findRun(
-      String(req.params.id),
-    );
-    if (!run || !(await canSeeRun(run, userId))) {
-      res.status(404).json({ error: "Run not found" });
-      return;
-    }
-    res.json(publicRun(run));
-  } catch (error) {
-    sendError(res, error, "operations_run");
-  }
-});
-
-/**
- * @openapi
- * /operations/runs/{id}/cancel:
- *   post:
- *     summary: Cancel a run
- *     description: Stops a running action, or withdraws one waiting for approval.
- *     tags:
- *       - Operations
- *     parameters:
- *       - in: path
- *         name: id
- *         required: true
- *         schema:
- *           type: string
- *     responses:
- *       200:
- *         description: Whether anything was cancelled.
- *       404:
- *         description: Not found, or not visible to the caller.
- */
-router.post("/runs/:id/cancel", authenticateJWT, async (req, res) => {
-  const { userId } = req as OperationsRequest;
-  try {
-    const run = await createCurrentOperationRepository().findRun(
-      String(req.params.id),
-    );
-    if (!run || !(await canSeeRun(run, userId))) {
-      res.status(404).json({ error: "Run not found" });
-      return;
-    }
-    res.json({ cancelled: await cancelOperationRun(run) });
-  } catch (error) {
-    sendError(res, error, "operations_cancel");
-  }
-});
-
-/**
- * @openapi
- * /operations/runs/{id}/undo:
- *   post:
- *     summary: Undo a run
- *     description: Runs the action's undo with the input the run recorded. It goes through the same checks as any run.
- *     tags:
- *       - Operations
- *     parameters:
- *       - in: path
- *         name: id
- *         required: true
- *         schema:
- *           type: string
- *     responses:
- *       200:
- *         description: The new run.
- *       404:
- *         description: Not found, or nothing to undo.
- */
-router.post("/runs/:id/undo", authenticateJWT, async (req, res) => {
-  const authReq = req as OperationsRequest;
-  try {
-    const run = await createCurrentOperationRepository().findRun(
-      String(req.params.id),
-    );
-    const undo = run ? getAction(run.actionId)?.action.undo : undefined;
-    if (
-      !run ||
-      !undo ||
-      !run.undoInput ||
-      !(await canSeeRun(run, authReq.userId))
-    ) {
-      res.status(404).json({ error: "Nothing to undo" });
-      return;
-    }
-    res.json(
-      await runOperation({
-        actionId: undo,
-        hostId: run.hostId ?? undefined,
-        input: parseJson(run.undoInput),
-        confirmed: req.body?.confirmed === true,
-        undoOf: run.id,
-        userId: authReq.userId,
-        origin: originOf(authReq),
-        apiKeyScopes: authReq.apiKeyScopes,
-      }),
-    );
-  } catch (error) {
-    sendError(res, error, "operations_undo");
-  }
-});
-
-/**
- * @openapi
- * /operations/approvals:
- *   get:
- *     summary: List waiting approvals
- *     description: Requests the caller could decide, with the exact input that would run.
- *     tags:
- *       - Operations
- *     responses:
- *       200:
- *         description: Waiting approvals.
- */
-router.get("/approvals", authenticateJWT, async (req, res) => {
-  const { userId } = req as OperationsRequest;
-  try {
-    const repository = createCurrentOperationRepository();
-    const approvals = [];
-    for (const approval of await repository.listPendingApprovals()) {
-      const run = await repository.findRun(approval.runId);
-      if (run && (await canSeeRun(run, userId))) {
-        approvals.push({ ...approval, run: publicRun(run) });
-      }
-    }
-    res.json({ approvals });
-  } catch (error) {
-    sendError(res, error, "operations_approvals");
-  }
-});
-
-/**
- * @openapi
- * /operations/approvals/{id}:
- *   post:
- *     summary: Approve or reject a request
- *     description: One shot. What runs is the sealed request, never anything sent here.
- *     tags:
- *       - Operations
- *     parameters:
- *       - in: path
- *         name: id
- *         required: true
- *         schema:
- *           type: string
- *     requestBody:
- *       required: true
- *       content:
- *         application/json:
- *           schema:
- *             type: object
- *             required: [approve]
- *             properties:
- *               approve:
- *                 type: boolean
- *               comment:
- *                 type: string
- *     responses:
- *       200:
- *         description: The run's outcome.
- *       403:
- *         description: The caller may not decide this.
- *       409:
- *         description: Already decided, expired, or the host changed.
- */
-router.post("/approvals/:id", authenticateJWT, async (req, res) => {
-  const authReq = req as OperationsRequest;
-  if (typeof req.body?.approve !== "boolean") {
-    res.status(400).json({ error: "approve must be true or false" });
-    return;
-  }
-  // A key could be handed to a script, so a person decides from a session.
-  if (authReq.apiKeyScopes) {
-    res.status(403).json({ error: "This API key may not approve" });
-    return;
-  }
-  try {
-    res.json(
-      await decideOperationApproval({
-        approvalId: String(req.params.id),
-        approverId: authReq.userId,
-        approve: req.body.approve,
-        comment:
-          typeof req.body.comment === "string" ? req.body.comment : undefined,
-        impersonated: !!authReq.actingAdminUserId,
-      }),
-    );
-  } catch (error) {
-    sendError(res, error, "operations_approve");
-  }
-});
-
-/**
- * @openapi
- * /operations/events:
- *   get:
- *     summary: List declared events
- *     tags:
- *       - Operations
- *     responses:
- *       200:
- *         description: Declared events from running plugins, plus core's run events.
- */
-router.get("/events", authenticateJWT, async (req, res) => {
-  const { userId } = req as OperationsRequest;
-  try {
-    const catalog = await buildCatalog({
-      userId,
-      lang: typeof req.query.lang === "string" ? req.query.lang : undefined,
-    });
-    res.json({ events: catalog.events });
-  } catch (error) {
-    sendError(res, error, "operations_events");
-  }
-});
-
-/**
- * @openapi
- * /operations/timeline:
- *   get:
- *     summary: Recent events
- *     description: Events the caller may see, newest first. Events tied to a host need access to it.
- *     tags:
- *       - Operations
- *     parameters:
- *       - in: query
- *         name: hostId
- *         schema:
- *           type: integer
- *       - in: query
- *         name: before
- *         schema:
- *           type: string
- *       - in: query
- *         name: limit
- *         schema:
- *           type: integer
- *     responses:
- *       200:
- *         description: Events.
- */
-router.get("/timeline", authenticateJWT, async (req, res) => {
-  const { userId } = req as OperationsRequest;
-  try {
-    const rows = await createCurrentOperationRepository().listEvents(
-      {
-        hostId: limitFrom(req.query.hostId),
-        before:
-          typeof req.query.before === "string" ? req.query.before : undefined,
-      },
-      limitFrom(req.query.limit),
-    );
-    const viewAll = await permissions.hasPermission(userId, VIEW_ALL_RUNS);
-    const access = new Map<number, boolean>();
-    const events = [];
-    for (const row of rows) {
-      if (row.hostId === null) {
-        if (viewAll) events.push(row);
-        continue;
-      }
-      let allowed = access.get(row.hostId);
-      if (allowed === undefined) {
-        allowed = (
-          await permissions.canAccessHost(userId, row.hostId, "connect")
-        ).hasAccess;
-        access.set(row.hostId, allowed);
-      }
-      if (allowed) events.push(row);
-    }
-    res.json({
-      events: events.map((event) => ({
-        ...event,
-        payload: parseJson(event.payload),
-      })),
-    });
-  } catch (error) {
-    sendError(res, error, "operations_timeline");
-  }
-});
-
-/**
- * @openapi
- * /operations/signals:
- *   get:
- *     summary: Read status tiles
- *     description: Answers from memory right away and refreshes stale hosts behind it, so a page should poll. Reads hosts the caller can reach.
- *     tags:
- *       - Operations
- *     parameters:
- *       - in: query
- *         name: hostIds
- *         description: Comma separated. Leave out for every host.
- *         schema:
- *           type: string
- *       - in: query
- *         name: ids
- *         description: Comma separated signal ids. Leave out for all.
- *         schema:
- *           type: string
- *     responses:
- *       200:
- *         description: One entry per signal with per host results.
- */
-router.get("/signals", authenticateJWT, async (req, res) => {
-  const authReq = req as OperationsRequest;
-  try {
-    const catalog = await buildCatalog({ userId: authReq.userId });
-    const wanted =
-      typeof req.query.ids === "string" && req.query.ids
-        ? new Set(req.query.ids.split(","))
-        : null;
-    const hostIds = hostIdsFrom(req.query.hostIds);
-    const signals = [];
-    for (const signal of catalog.signals) {
-      if (wanted && !wanted.has(signal.id)) continue;
-      if (signal.scope === "server") {
-        const outcome = await runOperation({
-          actionId: signal.read,
-          internal: true,
-          userId: authReq.userId,
-          origin: originOf(authReq),
-        }).catch(() => null);
-        signals.push({
-          id: signal.id,
-          hosts: [],
-          result: outcome?.data as SignalResult | undefined,
-        });
-        continue;
-      }
-      signals.push({
-        id: signal.id,
-        hosts: await readAcrossHosts<SignalResult>({
-          userId: authReq.userId,
-          actionId: signal.read,
-          hostIds,
-          origin: originOf(authReq),
-        }),
-      });
-    }
-    res.json({ signals });
-  } catch (error) {
-    sendError(res, error, "operations_signals");
-  }
-});
-
-/**
- * @openapi
- * /operations/resources/{id}:
- *   get:
- *     summary: Read one kind of thing across hosts
- *     description: Rows from cache plus each host's state (ok, loading, offline, error, no-access). Answers right away and refreshes stale hosts behind it, so a page should poll until no host is loading.
- *     tags:
- *       - Operations
- *     parameters:
- *       - in: path
- *         name: id
- *         required: true
- *         schema:
- *           type: string
- *       - in: query
- *         name: hostIds
- *         description: Comma separated. Leave out for every host.
- *         schema:
- *           type: string
- *       - in: query
- *         name: refresh
- *         schema:
- *           type: boolean
- *     responses:
- *       200:
- *         description: Rows and per host state.
- *       404:
- *         description: No such resource, or the caller may not read it.
- */
-router.get("/resources/:id", authenticateJWT, async (req, res) => {
-  const authReq = req as OperationsRequest;
-  try {
-    const catalog = await buildCatalog({ userId: authReq.userId });
-    const resource = catalog.resources.find(
-      (entry) => entry.id === req.params.id,
-    );
-    if (!resource) {
-      res.status(404).json({ error: "Resource not found" });
-      return;
-    }
-    const reads = await readAcrossHosts<ResourceListResult>({
-      userId: authReq.userId,
-      actionId: resource.list,
-      hostIds: hostIdsFrom(req.query.hostIds),
-      refresh: req.query.refresh === "true",
-      origin: originOf(authReq),
-    });
-    res.json(flattenResourceRows(reads, resource.key));
-  } catch (error) {
-    sendError(res, error, "operations_resources");
-  }
-});
-
-/**
- * @openapi
- * /operations/{id}/run:
- *   post:
- *     summary: Run an action
- *     description: Goes through permission, host access, input and approval checks. A change returns as soon as it starts unless wait is true, then poll the run. A read always answers inline.
- *     tags:
- *       - Operations
- *     parameters:
- *       - in: path
- *         name: id
- *         required: true
- *         schema:
- *           type: string
- *     requestBody:
- *       required: true
- *       content:
- *         application/json:
- *           schema:
- *             type: object
- *             properties:
- *               hostId:
- *                 type: integer
- *               resourceKey:
- *                 type: string
- *               input:
- *                 type: object
- *               dryRun:
- *                 type: boolean
- *               confirmed:
- *                 type: boolean
- *               idempotencyKey:
- *                 type: string
- *               wait:
- *                 type: boolean
- *     responses:
- *       200:
- *         description: The outcome, or a run waiting for approval.
- *       400:
- *         description: Invalid input.
- *       403:
- *         description: Not allowed.
- *       409:
- *         description: Needs a confirm, or safe mode is on.
- */
-router.post("/:id/run", authenticateJWT, async (req, res) => {
-  const authReq = req as OperationsRequest;
-  const body = (req.body ?? {}) as Record<string, unknown>;
-  try {
-    res.json(
-      await runOperation({
-        actionId: String(req.params.id),
-        hostId: typeof body.hostId === "number" ? body.hostId : undefined,
-        resourceKey:
-          typeof body.resourceKey === "string" ? body.resourceKey : undefined,
-        input: body.input,
-        dryRun: body.dryRun === true,
-        confirmed: body.confirmed === true,
-        idempotencyKey:
-          typeof body.idempotencyKey === "string"
-            ? body.idempotencyKey.slice(0, 128)
-            : undefined,
-        userId: authReq.userId,
-        origin: originOf(authReq),
-        apiKeyScopes: authReq.apiKeyScopes,
-      }),
-    );
-  } catch (error) {
-    sendError(res, error, "operations_run_action");
-  }
-});
-
-export default router;
@@ -2706,10 +2706,6 @@ router.put(
 *     summary: Upload a .tmxplug to install from a file
 *     description: >
 *       Developer mode only. The body is the raw .tmxplug (at most 50 MB).
-       The release's .sig may come base64 encoded in the
-       X-Termix-Plugin-Signature header; an official one makes the file
-       install as an official plugin, and it may then fill in a plugin
-       whose download failed.
 *       The file is checked (archive, manifest, plugin API) and held for 30
 *       minutes, but nothing is loaded. The answer lists what it asks for so
 *       the admin can agree, then POST /plugins/upload/{token}/install
@@ -2755,13 +2751,7 @@ router.post(
    }
    try {
      const { stageUpload } = await import("../../plugins/manage.js");
-      // The release's .sig, base64 encoded, so an official file installs as
-      // official (and may write the tables its 2.8 version left).
-      const header = req.get("x-termix-plugin-signature");
-      const signature = header
-        ? Buffer.from(header, "base64").toString("utf8")
-        : null;
-      res.json(await stageUpload(req.body, signature));
+      res.json(await stageUpload(req.body));
    } catch (error) {
      sendManageError(
        res,
@@ -11,7 +11,6 @@ import {
 import { isAuthOverrideProtocol } from "../../hosts/protocol-auth/registry.js";
 import {
  assertHostsUnlocked,
-  hostLock,
  hasHostLocks,
  requireUnlockedHost,
  sendHostLocked,
@@ -37,10 +36,8 @@ import {
  createCurrentHostResolutionRepository,
  createCurrentRbacAccessRepository,
  createCurrentRoleRepository,
-  createCurrentSharedFolderAuthOverrideRepository,
  createCurrentUserRepository,
 } from "../repositories/factory.js";
-import { findUsableCredential } from "../../hosts/usable-credential.js";

 const router = express.Router();

@@ -725,40 +722,14 @@ router.get(
  },
 );

-/** The host grants that went to the same user or role as a folder rule. */
-export function grantsForFolderRule<
-  T extends { userId?: string | null; roleId?: number | null },
->(entries: T[], rule: { userId?: string | null; roleId?: number | null }): T[] {
-  return entries.filter((entry) =>
-    rule.userId
-      ? entry.userId === rule.userId
-      : rule.roleId != null && entry.roleId === rule.roleId,
-  );
-}
-
 /**
 * @openapi
 * /rbac/folder/access/{id}:
 *   delete:
 *     summary: Stop a folder share from applying to hosts added later
- *     description: Grants already fanned out to hosts stay, unless fromHosts=true, which also removes the same user's or role's access from every host in the folder and its subfolders that the caller may manage sharing on.
+ *     description: Grants already fanned out to hosts stay; revoke those per host.
 *     tags:
 *       - RBAC
- *     parameters:
- *       - in: path
- *         name: id
- *         required: true
- *         schema:
- *           type: integer
- *       - in: query
- *         name: fromHosts
- *         schema:
- *           type: boolean
- *     responses:
- *       200:
- *         description: Removed. removedFromHosts counts the host grants removed.
- *       404:
- *         description: No such rule.
 */
 router.delete(
  "/folder/access/:id",
@@ -770,35 +741,11 @@ router.delete(
    }
    try {
      const repository = createCurrentFolderAccessRepository();
-      const rule = await repository.findById(ruleId, req.userId!);
-      if (!rule) {
+      if (!(await repository.findById(ruleId, req.userId!))) {
        return res.status(404).json({ error: "Rule not found" });
      }
      await repository.deleteById(ruleId, req.userId!);
-
-      let removedFromHosts = 0;
-      if (req.query.fromHosts === "true") {
-        const hosts =
-          await createCurrentHostFolderRepository().listHostsInFolder(
-            req.userId!,
-            rule.folder,
-          );
-        const access = createCurrentRbacAccessRepository();
-        for (const host of hosts) {
-          if (hostLock(host.id)) continue;
-          if (!(await canManageHostSharing(req.userId!, host.id)).allowed)
-            continue;
-          let changed = false;
-          const entries = await access.listHostAccess(host.id);
-          for (const entry of grantsForFolderRule(entries, rule)) {
-            await access.revokeHostAccess(entry.id, host.id);
-            removedFromHosts++;
-            changed = true;
-          }
-          if (changed) await pruneHostGrants(host.id);
-        }
-      }
-      res.json({ success: true, removedFromHosts });
+      res.json({ success: true });
    } catch (error) {
      databaseLogger.error("Failed to delete folder access rule", error, {
        operation: "delete_folder_access",
@@ -2227,157 +2174,4 @@ router.get(
  },
 );

-/** A folder path as hosts store it ("Parent / Child"), or null. */
-function folderParam(value: unknown): string | null {
-  if (typeof value !== "string") return null;
-  const folder = value
-    .split(" / ")
-    .map((part) => part.trim())
-    .filter(Boolean)
-    .join(" / ");
-  return folder && folder.length <= 255 ? folder : null;
-}
-
-/**
- * @openapi
- * /rbac/folder-auth/{protocol}:
- *   get:
- *     summary: Get the current user's personal login for shared hosts in a folder
- *     tags: [RBAC]
- *     parameters:
- *       - in: path
- *         name: protocol
- *         required: true
- *         schema: { type: string }
- *       - in: query
- *         name: folder
- *         required: true
- *         schema: { type: string }
- *     responses:
- *       200:
- *         description: The folder, protocol and credential id, or null when none is set.
- *       400:
- *         description: Invalid folder or protocol.
- */
-router.get(
-  "/folder-auth/:protocol",
-  authenticateJWT,
-  requireDataAccess,
-  async (req: express.Request, res: express.Response) => {
-    try {
-      const userId = (req as AuthenticatedRequest).userId!;
-      const protocol = req.params.protocol;
-      const folder = folderParam(req.query.folder);
-      if (!folder) return res.status(400).json({ error: "Invalid folder" });
-      if (!isAuthOverrideProtocol(protocol)) {
-        return res
-          .status(400)
-          .json({ error: "Invalid authentication protocol" });
-      }
-      const credentialId =
-        await createCurrentSharedFolderAuthOverrideRepository().findCredentialId(
-          userId,
-          folder,
-          protocol,
-        );
-      res.json({ folder, protocol, credentialId });
-    } catch (error) {
-      databaseLogger.error("Failed to get folder login", error);
-      res.status(500).json({ error: "Failed to fetch credential" });
-    }
-  },
-);
-
-/**
- * @openapi
- * /rbac/folder-auth/{protocol}:
- *   put:
- *     summary: Set the current user's personal login for shared hosts in a folder
- *     description: >
- *       Used for every host shared with the user in this folder and its
- *       subfolders that has no personal login of its own. credentialId null
- *       clears it.
- *     tags: [RBAC]
- *     parameters:
- *       - in: path
- *         name: protocol
- *         required: true
- *         schema: { type: string }
- *     requestBody:
- *       required: true
- *       content:
- *         application/json:
- *           schema:
- *             type: object
- *             required: [folder, credentialId]
- *             properties:
- *               folder: { type: string }
- *               credentialId: { type: integer, nullable: true }
- *     responses:
- *       200:
- *         description: Saved.
- *       400:
- *         description: Invalid folder, protocol or credential id.
- *       404:
- *         description: The credential is not one the user can use.
- */
-router.put(
-  "/folder-auth/:protocol",
-  authenticateJWT,
-  requireDataAccess,
-  async (req: express.Request, res: express.Response) => {
-    try {
-      const userId = (req as AuthenticatedRequest).userId!;
-      const protocol = req.params.protocol;
-      const folder = folderParam(req.body?.folder);
-      const credentialId = req.body?.credentialId ?? null;
-      if (!folder) return res.status(400).json({ error: "Invalid folder" });
-      if (!isAuthOverrideProtocol(protocol)) {
-        return res
-          .status(400)
-          .json({ error: "Invalid authentication protocol" });
-      }
-      if (
-        credentialId !== null &&
-        (!Number.isInteger(credentialId) || credentialId <= 0)
-      ) {
-        return res.status(400).json({
-          error: "credentialId must be a positive integer or null",
-        });
-      }
-
-      const repository = createCurrentSharedFolderAuthOverrideRepository();
-      if (credentialId === null) {
-        await repository.clearCredential(userId, folder, protocol);
-      } else {
-        if (!(await findUsableCredential(credentialId, userId))) {
-          return res.status(404).json({ error: "Credential not found" });
-        }
-        await repository.setCredential(userId, folder, protocol, credentialId);
-      }
-
-      const { ipAddress, userAgent } = getRequestMeta(req);
-      await logAudit({
-        userId,
-        username: await getAuditUsername(userId),
-        action:
-          credentialId === null
-            ? "clear_shared_folder_auth_override"
-            : "set_shared_folder_auth_override",
-        resourceType: "folder",
-        resourceName: folder,
-        details: JSON.stringify({ protocol, credentialId }),
-        ipAddress,
-        userAgent,
-        success: true,
-      }).catch(() => undefined);
-
-      res.json({ success: true, folder, protocol, credentialId });
-    } catch (error) {
-      databaseLogger.error("Failed to set folder login", error);
-      res.status(500).json({ error: "Failed to update credential" });
-    }
-  },
-);
-
 export default router;
@@ -1,95 +0,0 @@
-import type { AuthenticatedRequest } from "../../../types/index.js";
-import type { RequestHandler, Router } from "express";
-import bcrypt from "bcryptjs";
-import { authLogger } from "../../utils/logger.js";
-import { createCurrentUserRepository } from "../repositories/factory.js";
-import { deleteUserAndRelatedData } from "./delete-user-data.js";
-
-function isNonEmptyString(val: unknown): val is string {
-  return typeof val === "string" && val.trim().length > 0;
-}
-
-export function registerUserDeleteAccountRoutes(
-  router: Router,
-  authenticateJWT: RequestHandler,
-): void {
-  /**
-   * @openapi
-   * /users/delete-account:
-   *   delete:
-   *     summary: Delete user account
-   *     description: Deletes the authenticated user's account and all of their data.
-   *     tags:
-   *       - Users
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               password:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Account deleted successfully.
-   *       400:
-   *         description: Password is required.
-   *       401:
-   *         description: Incorrect password.
-   *       403:
-   *         description: Cannot delete external authentication accounts or the last admin user.
-   *       404:
-   *         description: User not found.
-   *       500:
-   *         description: Failed to delete account.
-   */
-  router.delete("/delete-account", authenticateJWT, async (req, res) => {
-    const userId = (req as AuthenticatedRequest).userId;
-    const { password } = req.body ?? {};
-
-    if (!isNonEmptyString(password)) {
-      return res
-        .status(400)
-        .json({ error: "Password is required to delete account" });
-    }
-
-    try {
-      const userRepository = createCurrentUserRepository();
-      const userRecord = await userRepository.findById(userId);
-      if (!userRecord) {
-        return res.status(404).json({ error: "User not found" });
-      }
-
-      if (userRecord.isExternal) {
-        return res.status(403).json({
-          error:
-            "Cannot delete external authentication accounts through this endpoint",
-        });
-      }
-
-      const isMatch = await bcrypt.compare(password, userRecord.passwordHash);
-      if (!isMatch) {
-        authLogger.warn(
-          `Incorrect password provided for account deletion: ${userRecord.username}`,
-        );
-        return res.status(401).json({ error: "Incorrect password" });
-      }
-
-      if (userRecord.isAdmin && (await userRepository.countAdmins()) <= 1) {
-        return res
-          .status(403)
-          .json({ error: "Cannot delete the last admin user" });
-      }
-
-      // Same cleanup as an admin delete, so plugins hear user.deleted too.
-      await deleteUserAndRelatedData(userId);
-
-      authLogger.success(`User account deleted: ${userRecord.username}`);
-      res.json({ message: "Account deleted successfully" });
-    } catch (err) {
-      authLogger.error("Failed to delete user account", err);
-      res.status(500).json({ error: "Failed to delete account" });
-    }
-  });
-}
@@ -31,7 +31,6 @@ import { shownIdentity } from "../../sync/shown-identity.js";
 import { registerUserExternalAccountRoutes } from "./user-external-account-routes.js";
 import { registerUserPasswordResetRoutes } from "./user-password-reset-routes.js";
 import { registerUserAdminRoutes } from "./user-admin-routes.js";
-import { registerUserDeleteAccountRoutes } from "./user-delete-account-routes.js";
 import { registerUserDataAccessRoutes } from "./user-data-access-routes.js";
 import { listExternalLoginMethods, registerAuthRoutes } from "./auth-routes.js";
 import { registerAuthCompatRoutes } from "./auth-compat-routes.js";
@@ -319,7 +318,7 @@ router.post("/proxy-login", async (req, res) => {
  try {
    if (!isTrustedProxyAddress(sourceAddress, config.trustedProxies)) {
      authLogger.warn(
-        `Rejected proxy authentication from an untrusted source: ${sourceAddress ?? "unknown"}`,
+        "Rejected proxy authentication from an untrusted source",
        {
          operation: "trusted_proxy_auth_rejected",
          sourceAddress,
@@ -1230,7 +1229,86 @@ router.patch("/password-reset-allowed", authenticateJWT, async (req, res) => {
  }
 });

-registerUserDeleteAccountRoutes(router, authenticateJWT);
+/**
+ * @openapi
+ * /users/delete-account:
+ *   delete:
+ *     summary: Delete user account
+ *     description: Deletes the authenticated user's account.
+ *     tags:
+ *       - Users
+ *     requestBody:
+ *       required: true
+ *       content:
+ *         application/json:
+ *           schema:
+ *             type: object
+ *             properties:
+ *               password:
+ *                 type: string
+ *     responses:
+ *       200:
+ *         description: Account deleted successfully.
+ *       400:
+ *         description: Password is required.
+ *       401:
+ *         description: Incorrect password.
+ *       403:
+ *         description: Cannot delete external authentication accounts or the last admin user.
+ *       404:
+ *         description: User not found.
+ *       500:
+ *         description: Failed to delete account.
+ */
+router.delete("/delete-account", authenticateJWT, async (req, res) => {
+  const userId = (req as AuthenticatedRequest).userId;
+  const { password } = req.body;
+
+  if (!isNonEmptyString(password)) {
+    return res
+      .status(400)
+      .json({ error: "Password is required to delete account" });
+  }
+
+  try {
+    const userRecord = await findCurrentUser(userId);
+    if (!userRecord) {
+      return res.status(404).json({ error: "User not found" });
+    }
+
+    if (userRecord.isExternal) {
+      return res.status(403).json({
+        error:
+          "Cannot delete external authentication accounts through this endpoint",
+      });
+    }
+
+    const isMatch = await bcrypt.compare(password, userRecord.passwordHash);
+    if (!isMatch) {
+      authLogger.warn(
+        `Incorrect password provided for account deletion: ${userRecord.username}`,
+      );
+      return res.status(401).json({ error: "Incorrect password" });
+    }
+
+    if (userRecord.isAdmin) {
+      const adminCount = await createCurrentUserRepository().countAdmins();
+      if (adminCount <= 1) {
+        return res
+          .status(403)
+          .json({ error: "Cannot delete the last admin user" });
+      }
+    }
+
+    await createCurrentUserRepository().delete(userId);
+
+    authLogger.success(`User account deleted: ${userRecord.username}`);
+    res.json({ message: "Account deleted successfully" });
+  } catch (err) {
+    authLogger.error("Failed to delete user account", err);
+    res.status(500).json({ error: "Failed to delete account" });
+  }
+});

 registerUserPasswordResetRoutes(router, { authManager });

@@ -99,12 +99,7 @@ async function prepareKey(

  if (passphrase) config.passphrase = passphrase;
  // Lets a server that wants key then password (or password only) still work.
-  // ssh2 tries password first by default, so it has none left to answer with
-  // once the key was accepted as the first step.
-  if (host.password) {
-    config.password = host.password;
-    config.authHandler = ["publickey", "password", "keyboard-interactive"];
-  }
+  if (host.password) config.password = host.password;

  const certPublicKey = host.certPublicKey;
  if (certPublicKey && certPublicKey.trim()) {
@@ -7,10 +7,7 @@
 */

 import type { Duplex } from "node:stream";
-import type {
-  PluginSshTransportHost,
-  PluginSshTransportProvider,
-} from "@termix-ssh/plugin-sdk/backend";
+import type { PluginSshTransportProvider } from "@termix-ssh/plugin-sdk/backend";

 interface Entry {
  pluginId: string;
@@ -36,13 +33,15 @@ export function clearSshTransports(): void {
 }

 /** Opens a stream to the host if a provider claims it, else null. */
-export async function openProvidedTransport(
-  host: PluginSshTransportHost,
-): Promise<Duplex | null> {
+export async function openProvidedTransport(host: {
+  id: number;
+  ip: string;
+  port: number;
+}): Promise<Duplex | null> {
  for (const { provider } of providers.values()) {
    let claimed = false;
    try {
-      claimed = provider.claims(host.id, host);
+      claimed = provider.claims(host.id);
    } catch {
      claimed = false;
    }
@@ -99,10 +99,6 @@ export async function openSshTransport(
    id: host.id,
    ip: host.ip,
    port: host.port || 22,
-    userId: host.userId ?? null,
-    syncId: host.syncId ?? null,
-    connectionOrigin: host.connectionOrigin ?? null,
-    localOnly: Boolean(host.localOnly),
  });
  if (provided) {
    config.sock = provided;
@@ -24,9 +24,6 @@ export interface SshConnectHost {
  port: number;
  username: string;
  userId?: string | null;
-  syncId?: string | null;
-  connectionOrigin?: "local" | "remote" | null;
-  localOnly?: boolean | null;
  authType?: string | null;
  password?: string | null;
  key?: string | Buffer | null;
@@ -87,18 +87,11 @@ export async function resolveHostCredentials(
            ...recipientHost,
            authOverrides: {
              ...authOverrides,
-              ssh: resolution.folder
-                ? {
-                    required: false,
-                    ownerAuthShared: !!host.shareSshAuth,
-                    folder: resolution.folder,
-                    folderCredentialId: resolution.credentialId,
-                  }
-                : {
-                    credentialId: resolution.credentialId,
-                    required: false,
-                    ownerAuthShared: !!host.shareSshAuth,
-                  },
+              ssh: {
+                credentialId: resolution.credentialId,
+                required: false,
+                ownerAuthShared: !!host.shareSshAuth,
+              },
            },
            authType:
              credential.key || credential.privateKey
@@ -13,7 +13,7 @@ import net from "node:net";
 import type { Duplex } from "node:stream";
 import { createWebSocketStream, type WebSocket } from "ws";
 import type { PluginWebSocketConnection } from "@termix-ssh/plugin-sdk/backend";
-import { resolveHostById, resolveHostBySyncId } from "./host-resolver.js";
+import { resolveHostById } from "./host-resolver.js";
 import { openSshTransport } from "./connect/transport.js";
 import type { MutableConnectConfig, SshConnectHost } from "./connect/types.js";
 import { sshLogger } from "../utils/logger.js";
@@ -35,13 +35,12 @@ async function handleRelay(
 ): Promise<void> {
  const ws = connection.socket as WebSocket;
  const url = String((connection.request as { url?: string }).url ?? "");
-  const params = new URL(url, "http://relay").searchParams;
-  const hostId = Number(params.get("hostId"));
-  // A linked desktop knows its hosts by sync id, not by this server's id.
-  const syncId = params.get("syncId");
+  const hostId = Number(
+    new URL(url, "http://relay").searchParams.get("hostId"),
+  );
  const userId = connection.userId;

-  if (!userId || (!syncId && (!Number.isSafeInteger(hostId) || hostId <= 0))) {
+  if (!userId || !Number.isSafeInteger(hostId) || hostId <= 0) {
    close(ws, 1008, "A host is required");
    return;
  }
@@ -50,9 +49,7 @@ async function handleRelay(
    return;
  }

-  const host = syncId
-    ? await resolveHostBySyncId(syncId, userId)
-    : await resolveHostById(hostId, userId);
+  const host = await resolveHostById(hostId, userId);
  if (!host) {
    close(ws, 1008, "Host not found or access denied");
    return;
@@ -96,8 +93,7 @@ async function handleRelay(
  } catch (error) {
    sshLogger.warn("A relay could not reach its host", {
      operation: "ssh_relay_open",
-      hostId: syncId ? undefined : hostId,
-      syncId,
+      hostId,
      error: error instanceof Error ? error.message : String(error),
    });
    finish();
@@ -1,129 +0,0 @@
-/**
- * Who may run what without a person saying yes.
- *
- * A plugin fills this through ctx.operations.approvals.provide. Core asks every
- * provider and the strictest answer wins. A provider that throws denies the
- * run, since skipping a safety rule is worse than a refused action.
- */
-
-import type { OperationRisk } from "@termix-ssh/plugin-sdk/operations";
-import { riskRank } from "@termix-ssh/plugin-sdk/operations";
-import { hasCapability } from "../plugins/permissions.js";
-import { pluginLogger } from "../utils/logger.js";
-import type { ActorOrigin } from "../plugins/actor.js";
-import type { PluginManifest } from "../plugins/manifest.js";
-
-export interface ApprovalPolicyInput {
-  actionId: string;
-  pluginId: string;
-  /** What the plugin declared. */
-  risk: OperationRisk;
-  /** What rules should use. Plugins not signed as official count as change. */
-  effectiveRisk: OperationRisk;
-  origin: ActorOrigin;
-  userId: string;
-  hostId?: number;
-  hostTags?: string[];
-  batchId?: string;
-}
-
-export interface ApprovalDecision {
-  decision: "allow" | "approve" | "deny";
-  reason?: string;
-  /** The requester may approve their own run. */
-  allowSelf?: boolean;
-  expiresInMinutes?: number;
-}
-
-export type ApprovalPolicyProvider = (
-  input: ApprovalPolicyInput,
-) =>
-  | ApprovalDecision
-  | null
-  | undefined
-  | Promise<ApprovalDecision | null | undefined>;
-
-interface Entry {
-  pluginId: string;
-  manifest: PluginManifest;
-  provider: ApprovalPolicyProvider;
-}
-
-const providers = new Map<symbol, Entry>();
-
-export function provideApprovalPolicy(
-  pluginId: string,
-  manifest: PluginManifest,
-  provider: ApprovalPolicyProvider,
-): () => void {
-  const key = Symbol(pluginId);
-  providers.set(key, { pluginId, manifest, provider });
-  return () => {
-    providers.delete(key);
-  };
-}
-
-/** Test seam. */
-export function clearApprovalPolicies(): void {
-  providers.clear();
-}
-
-const RANK = { allow: 0, approve: 1, deny: 2 } as const;
-const TRUSTED_VIA = new Set(["automation", "rollout", "fleet"]);
-const SELF_APPROVE_VIA = new Set(["assistant", "mcp", "automation"]);
-
-/** A person is the check when the request came from something else. */
-export function canSelfApprove(origin: ActorOrigin): boolean {
-  return origin.kind === "plugin" && SELF_APPROVE_VIA.has(origin.via ?? "");
-}
-
-/**
- * Used when no provider has an opinion. People and their own keys go by RBAC,
- * and so do automations they set up. Anything else needs a rule that allows it.
- */
-function builtIn(input: ApprovalPolicyInput): ApprovalDecision {
-  if (riskRank(input.effectiveRisk) === 0) return { decision: "allow" };
-  if (input.origin.kind !== "plugin") return { decision: "allow" };
-  if (TRUSTED_VIA.has(input.origin.via ?? "")) return { decision: "allow" };
-  return {
-    decision: "deny",
-    reason: "This needs an approval rule. Turn on approvals to allow it.",
-  };
-}
-
-export async function evaluateApproval(
-  input: ApprovalPolicyInput,
-): Promise<ApprovalDecision> {
-  let strictest: ApprovalDecision | null = null;
-  for (const entry of providers.values()) {
-    let decision: ApprovalDecision | null | undefined;
-    try {
-      // Rechecked at use, so a revoked grant stops the provider now.
-      if (
-        !(await hasCapability(
-          entry.pluginId,
-          "operations:approve",
-          entry.manifest.capabilities,
-        ))
-      ) {
-        continue;
-      }
-      decision = await entry.provider(input);
-    } catch (error) {
-      pluginLogger.warn("Approval rule failed, refusing the run", {
-        operation: "operation_approval",
-        pluginId: entry.pluginId,
-        error: error instanceof Error ? error.message : String(error),
-      });
-      return {
-        decision: "deny",
-        reason: "Approval rules are not available right now.",
-      };
-    }
-    if (!decision) continue;
-    if (!strictest || RANK[decision.decision] > RANK[strictest.decision]) {
-      strictest = decision;
-    }
-  }
-  return strictest ?? builtIn(input);
-}
@@ -1,251 +0,0 @@
-/**
- * What a user can do right now, in their language.
- *
- * Built from the manifests of running plugins, never from GET /plugins, which
- * hands every signed-in user the raw manifest. A plugin's locale file loads
- * here on the server, because its frontend may not be loaded on the client:
- * the CLI has no frontend, and a linked desktop may not have the plugin at all.
- */
-
-import fs from "node:fs";
-import path from "node:path";
-import {
-  onSurface,
-  toJsonSchema,
-  type OperationAction,
-  type OperationEvent,
-  type OperationField,
-  type OperationResource,
-  type OperationSignal,
-  type OperationSurfaces,
-} from "@termix-ssh/plugin-sdk/operations";
-import { getAction } from "./registry.js";
-import { qualifyPermission, type PluginManifest } from "../plugins/manifest.js";
-import { PermissionManager } from "../utils/permission-manager.js";
-
-interface CatalogPlugin {
-  id: string;
-  dir: string;
-  manifest: PluginManifest;
-  state: string;
-  official: boolean;
-}
-
-export interface CatalogField extends OperationField {
-  label: string;
-  description?: string;
-  placeholder?: string;
-  optionLabels?: Record<string, string>;
-}
-
-export interface CatalogAction extends Omit<
-  OperationAction,
-  "inputs" | "outputs"
-> {
-  pluginId: string;
-  pluginName: string;
-  official: boolean;
-  title: string;
-  description?: string;
-  inputs: CatalogField[];
-  outputs: CatalogField[];
-  inputSchema: Record<string, unknown>;
-  available: boolean;
-}
-
-export interface CatalogEvent extends OperationEvent {
-  pluginId: string;
-  title: string;
-}
-
-export interface CatalogResource extends OperationResource {
-  pluginId: string;
-  title: string;
-  columns: (NonNullable<OperationResource["columns"]>[number] & {
-    title: string;
-  })[];
-}
-
-export interface CatalogSignal extends OperationSignal {
-  pluginId: string;
-  title: string;
-}
-
-export interface OperationCatalog {
-  actions: CatalogAction[];
-  events: CatalogEvent[];
-  resources: CatalogResource[];
-  signals: CatalogSignal[];
-}
-
-type Strings = Record<string, string>;
-
-const localeCache = new Map<string, Strings>();
-
-function flatten(value: unknown, prefix: string, out: Strings): void {
-  if (typeof value === "string") {
-    out[prefix] = value;
-    return;
-  }
-  if (typeof value !== "object" || value === null) return;
-  for (const [key, child] of Object.entries(value)) {
-    flatten(child, prefix ? `${prefix}.${key}` : key, out);
-  }
-}
-
-function readLocale(file: string): Strings {
-  const out: Strings = {};
-  try {
-    flatten(JSON.parse(fs.readFileSync(file, "utf8")), "", out);
-  } catch {
-    // A missing or broken file falls back to the key.
-  }
-  return out;
-}
-
-/** Locale names reach a path, so only a plain language tag is used. */
-function safeLanguage(lang: string | undefined): string {
-  return lang && /^[a-zA-Z]{2,3}(-[a-zA-Z0-9]{2,8})?$/.test(lang) ? lang : "en";
-}
-
-function stringsFor(plugin: CatalogPlugin, lang: string): Strings {
-  const cacheKey = `${plugin.id}@${plugin.manifest.version}:${lang}`;
-  const cached = localeCache.get(cacheKey);
-  if (cached) return cached;
-
-  const dir = path.resolve(plugin.dir, plugin.manifest.locales ?? "locales");
-  const strings = readLocale(path.join(dir, "en.json"));
-  if (lang !== "en") {
-    Object.assign(
-      strings,
-      readLocale(path.join(dir, "translated", `${lang}.json`)),
-      readLocale(path.join(dir, `${lang}.json`)),
-    );
-  }
-  localeCache.set(cacheKey, strings);
-  return strings;
-}
-
-function localizedField(field: OperationField, strings: Strings): CatalogField {
-  const text = (key?: string) => (key ? (strings[key] ?? key) : undefined);
-  const optionLabels: Record<string, string> = {};
-  for (const option of field.options ?? []) {
-    optionLabels[option.value] = text(option.labelKey) ?? option.value;
-  }
-  return {
-    ...field,
-    label: text(field.labelKey) ?? field.key,
-    description: text(field.descriptionKey),
-    placeholder: text(field.placeholderKey),
-    optionLabels: field.options ? optionLabels : undefined,
-  };
-}
-
-async function runningPlugins(): Promise<CatalogPlugin[]> {
-  const { getPluginRuntime } = await import("../plugins/index.js");
-  return getPluginRuntime()
-    .loader.list()
-    .filter((plugin) => plugin.state === "active")
-    .map((plugin) => ({
-      id: plugin.id,
-      dir: plugin.dir,
-      manifest: plugin.manifest,
-      state: plugin.state,
-      official: plugin.source === "bundled" || plugin.signedTier === "official",
-    }));
-}
-
-export async function buildCatalog(options: {
-  userId: string;
-  lang?: string;
-  surface?: keyof OperationSurfaces;
-}): Promise<OperationCatalog> {
-  const lang = safeLanguage(options.lang);
-  const permissions = PermissionManager.getInstance();
-  const catalog: OperationCatalog = {
-    actions: [],
-    events: [],
-    resources: [],
-    signals: [],
-  };
-
-  for (const plugin of await runningPlugins()) {
-    const operations = plugin.manifest.contributes?.operations;
-    if (!operations) continue;
-    const strings = stringsFor(plugin, lang);
-    const text = (key: string) => strings[key] ?? key;
-
-    for (const action of operations.actions ?? []) {
-      if (options.surface && !onSurface(action, options.surface)) continue;
-      // Community plugins stay away from the assistant and MCP until an admin allows them.
-      if (
-        !plugin.official &&
-        (options.surface === "assistant" || options.surface === "mcp")
-      ) {
-        continue;
-      }
-      const permission = qualifyPermission(plugin.id, action.permission);
-      if (!(await permissions.hasPermission(options.userId, permission))) {
-        continue;
-      }
-      const inputs = (action.inputs ?? []).map((field) =>
-        localizedField(field, strings),
-      );
-      catalog.actions.push({
-        ...action,
-        pluginId: plugin.id,
-        pluginName: plugin.manifest.name,
-        official: plugin.official,
-        title: text(action.titleKey),
-        description: action.descriptionKey
-          ? text(action.descriptionKey)
-          : undefined,
-        inputs,
-        outputs: (action.outputs ?? [])
-          .filter((field) => !field.sensitive)
-          .map((field) => localizedField(field, strings)),
-        inputSchema: toJsonSchema(
-          action.inputs,
-          (field) =>
-            inputs.find((input) => input.key === field.key)?.description,
-        ),
-        available: getAction(action.id) !== undefined,
-      });
-    }
-
-    const visible = new Set(catalog.actions.map((action) => action.id));
-    for (const event of operations.events ?? []) {
-      catalog.events.push({
-        ...event,
-        pluginId: plugin.id,
-        title: text(event.titleKey),
-      });
-    }
-    for (const resource of operations.resources ?? []) {
-      if (!visible.has(resource.list)) continue;
-      catalog.resources.push({
-        ...resource,
-        pluginId: plugin.id,
-        title: text(resource.titleKey),
-        columns: (resource.columns ?? []).map((column) => ({
-          ...column,
-          title: text(column.titleKey),
-        })),
-      });
-    }
-    for (const signal of operations.signals ?? []) {
-      if (!visible.has(signal.read)) continue;
-      catalog.signals.push({
-        ...signal,
-        pluginId: plugin.id,
-        title: text(signal.titleKey),
-      });
-    }
-  }
-  return catalog;
-}
-
-/** Test seam. */
-export function clearCatalogCache(): void {
-  localeCache.clear();
-}
@@ -1,8 +0,0 @@
-/** How many events or actions may lead to one another before the chain stops. */
-export const MAX_EVENT_DEPTH = 3;
-
-/** How long finished runs and events stay in history. */
-export const RETENTION_DAYS = 90;
-
-/** How long a cached table row or tile counts as fresh. */
-export const RESOURCE_FRESH_MS = 60_000;
@@ -1,155 +0,0 @@
-/**
- * Declared events, separate from the plugin.* bus any plugin can read.
- *
- * Each event is kept in a capped timeline. A subscriber bound to a user only
- * hears about hosts that user can reach, checked at delivery. Events carry a
- * depth, so a rule that fires an action that fires the same rule stops.
- */
-
-import { randomUUID } from "node:crypto";
-import { MAX_EVENT_DEPTH } from "./constants.js";
-import { getActorTrail, runAsActor } from "../plugins/actor.js";
-import { PermissionManager } from "../utils/permission-manager.js";
-import { pluginLogger } from "../utils/logger.js";
-import { createCurrentOperationRepository } from "../database/repositories/factory.js";
-
-export interface OperationEventInput {
-  eventId: string;
-  pluginId: string;
-  hostId?: number;
-  severity?: string;
-  payload?: unknown;
-  runId?: string;
-  depth?: number;
-}
-
-export interface DeliveredEvent {
-  id: string;
-  eventId: string;
-  pluginId: string;
-  hostId?: number;
-  severity?: string;
-  payload?: unknown;
-  runId?: string;
-  depth: number;
-  at: string;
-}
-
-export interface OperationEventSubscription {
-  /** Exact id, `<pluginId>.*` or `*`. */
-  pattern: string;
-  handler: (event: DeliveredEvent) => void | Promise<void>;
-  /** Only events for hosts this user can reach, and runs the handler as them. */
-  userId?: string;
-  /** Skips repeats of one event and host inside this window. */
-  cooldownMs?: number;
-}
-
-interface Subscriber extends OperationEventSubscription {
-  pluginId: string;
-  lastFired: Map<string, number>;
-}
-
-const subscribers = new Set<Subscriber>();
-
-function matches(pattern: string, eventId: string): boolean {
-  if (pattern === "*" || pattern === eventId) return true;
-  return pattern.endsWith(".*") && eventId.startsWith(pattern.slice(0, -1));
-}
-
-export function subscribeOperationEvents(
-  pluginId: string,
-  subscription: OperationEventSubscription,
-): () => void {
-  const entry = { ...subscription, pluginId, lastFired: new Map() };
-  subscribers.add(entry);
-  return () => {
-    subscribers.delete(entry);
-  };
-}
-
-async function deliver(subscriber: Subscriber, event: DeliveredEvent) {
-  const key = `${event.eventId}|${event.hostId ?? ""}`;
-  if (subscriber.cooldownMs) {
-    const last = subscriber.lastFired.get(key) ?? 0;
-    if (Date.now() - last < subscriber.cooldownMs) return;
-    subscriber.lastFired.set(key, Date.now());
-  }
-
-  const { userId } = subscriber;
-  if (userId && event.hostId !== undefined) {
-    const access = await PermissionManager.getInstance().canAccessHost(
-      userId,
-      event.hostId,
-      "connect",
-    );
-    if (!access.hasAccess) return;
-  }
-
-  const fire = () => Promise.resolve(subscriber.handler(event));
-  await (userId
-    ? runAsActor(userId, "service", fire, undefined, { depth: event.depth })
-    : fire());
-}
-
-/** Never throws. An event must not be able to fail what caused it. */
-export async function emitOperationEvent(
-  input: OperationEventInput,
-): Promise<void> {
-  try {
-    const trail = getActorTrail();
-    const depth = input.depth ?? trail.depth ?? 0;
-    const event: DeliveredEvent = {
-      id: randomUUID(),
-      eventId: input.eventId,
-      pluginId: input.pluginId,
-      hostId: input.hostId,
-      severity: input.severity,
-      payload: input.payload,
-      runId: input.runId ?? trail.runId,
-      depth,
-      at: new Date().toISOString(),
-    };
-
-    await createCurrentOperationRepository().insertEvent({
-      id: event.id,
-      eventId: event.eventId,
-      pluginId: event.pluginId,
-      hostId: event.hostId ?? null,
-      severity: event.severity ?? null,
-      payload:
-        event.payload === undefined ? null : JSON.stringify(event.payload),
-      runId: event.runId ?? null,
-      createdAt: event.at,
-    });
-
-    if (depth >= MAX_EVENT_DEPTH) {
-      pluginLogger.warn("Event chain stopped at the depth limit", {
-        operation: "operation_event_depth",
-        eventId: event.eventId,
-      });
-      return;
-    }
-
-    for (const subscriber of subscribers) {
-      if (!matches(subscriber.pattern, event.eventId)) continue;
-      void deliver(subscriber, event).catch((error) => {
-        pluginLogger.warn("Event subscriber failed", {
-          operation: "operation_event_delivery",
-          pluginId: subscriber.pluginId,
-          error: error instanceof Error ? error.message : String(error),
-        });
-      });
-    }
-  } catch (error) {
-    pluginLogger.warn("Could not record an event", {
-      operation: "operation_event",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-}
-
-/** Test seam. */
-export function clearOperationEvents(): void {
-  subscribers.clear();
-}
@@ -1,891 +0,0 @@
-/**
- * The one path every action takes, from any surface.
- *
- * In order: plugin up, grant still held, input valid, role permission, host
- * access, key scope, destructive confirm, approval, limits, run row, audit.
- * Handlers run in-process, so this is an access check for callers, not a
- * sandbox around plugins.
- *
- * Handler failures stay here. They never reach the plugin error budget, or five
- * failed hosts in a rollout would switch the plugin off.
- */
-
-import { randomUUID } from "node:crypto";
-import {
-  capText,
-  matchesWhen,
-  parseOperationInput,
-  redactFields,
-  riskRank,
-  type OperationAction,
-  type OperationRisk,
-} from "@termix-ssh/plugin-sdk/operations";
-import { MAX_EVENT_DEPTH } from "./constants.js";
-import { getAction, type OperationRegistration } from "./registry.js";
-import {
-  canSelfApprove,
-  evaluateApproval,
-  type ApprovalDecision,
-} from "./approvals.js";
-import { withLimits } from "./limits.js";
-import { emitOperationEvent } from "./events.js";
-import { dropResourceCache } from "./resources.js";
-import { loadOperationHost, type OperationHost } from "./hosts.js";
-import { runAsActor, type ActorOrigin } from "../plugins/actor.js";
-import { hasCapability } from "../plugins/permissions.js";
-import { qualifyPermission } from "../plugins/manifest.js";
-import { safeModeOn } from "../plugins/safe-mode.js";
-import { PermissionManager } from "../utils/permission-manager.js";
-import { logAudit } from "../utils/audit-logger.js";
-import {
-  decryptSystemSecret,
-  encryptSystemSecret,
-  isSystemEncrypted,
-} from "../utils/system-secret-crypto.js";
-import { pluginLogger } from "../utils/logger.js";
-import {
-  createCurrentOperationRepository,
-  createCurrentUserRepository,
-} from "../database/repositories/factory.js";
-import type {
-  OperationApprovalRecord,
-  OperationRunRecord,
-} from "../database/repositories/operation-repository.js";
-
-const MAX_OUTPUT = 32_000;
-const DEFAULT_TIMEOUT_MS = 300_000;
-const READ_TIMEOUT_MS = 60_000;
-const DEFAULT_APPROVAL_MINUTES = 24 * 60;
-const DRAIN_WAIT_MS = 10_000;
-
-export type OperationErrorCode =
-  | "NOT_FOUND"
-  | "UNAVAILABLE"
-  | "INVALID_INPUT"
-  | "FORBIDDEN"
-  | "SCOPE"
-  | "NEEDS_CONFIRM"
-  | "DENIED"
-  | "TOO_DEEP"
-  | "STALE"
-  | "CONFLICT"
-  | "SAFE_MODE";
-
-const STATUS: Record<OperationErrorCode, number> = {
-  NOT_FOUND: 404,
-  UNAVAILABLE: 503,
-  INVALID_INPUT: 400,
-  FORBIDDEN: 403,
-  SCOPE: 403,
-  NEEDS_CONFIRM: 409,
-  DENIED: 403,
-  TOO_DEEP: 409,
-  STALE: 409,
-  CONFLICT: 409,
-  SAFE_MODE: 409,
-};
-
-/** Refused before anything ran. Carries a status so routes can pass it on. */
-export class OperationError extends Error {
-  readonly status: number;
-
-  constructor(
-    readonly code: OperationErrorCode,
-    message: string,
-    readonly details?: unknown,
-  ) {
-    super(message);
-    this.name = "OperationError";
-    this.status = STATUS[code];
-  }
-}
-
-/** A handler throws this when a host needs a person to sign in first. */
-export class OperationNeedsInteraction extends Error {
-  readonly code = "NEEDS_INTERACTION";
-}
-
-export interface OperationRequest {
-  actionId: string;
-  hostId?: number;
-  resourceKey?: string;
-  input?: unknown;
-  dryRun?: boolean;
-  /** A person agreed to a destructive action. */
-  confirmed?: boolean;
-  idempotencyKey?: string;
-  batchId?: string;
-  undoOf?: string;
-  /** Background reads for tables and tiles. Writes no run row. */
-  internal?: boolean;
-  userId: string;
-  origin: ActorOrigin;
-  apiKeyScopes?: string[] | null;
-  depth?: number;
-}
-
-export interface OperationOutcome {
-  runId: string | null;
-  status: string;
-  summary?: string;
-  changed?: boolean;
-  data?: unknown;
-  error?: string;
-  errorCode?: string;
-  approvalId?: string;
-}
-
-interface Prepared {
-  registration: OperationRegistration;
-  action: OperationAction;
-  pluginVersion: string;
-  input: Record<string, unknown>;
-  host: OperationHost | null;
-  effectiveRisk: OperationRisk;
-}
-
-/** The sealed copy an approval is bound to. */
-interface ApprovalSnapshot {
-  runId: string;
-  actionId: string;
-  actionVersion: number;
-  pluginVersion: string;
-  hostId: number | null;
-  hostUpdatedAt: string | null;
-  resourceKey: string | null;
-  input: Record<string, unknown>;
-}
-
-const active = new Map<
-  string,
-  { pluginId: string; controller: AbortController; done: Promise<unknown> }
->();
-const draining = new Set<string>();
-
-function now(): string {
-  return new Date().toISOString();
-}
-
-function errorText(error: unknown): string {
-  return error instanceof Error ? error.message : String(error);
-}
-
-async function loadedPlugin(pluginId: string) {
-  const { getPluginRuntime } = await import("../plugins/index.js");
-  return getPluginRuntime().loader.get(pluginId);
-}
-
-async function usernameOf(userId: string): Promise<string> {
-  try {
-    const user = await createCurrentUserRepository().findById(userId);
-    return user?.username ?? userId;
-  } catch {
-    return userId;
-  }
-}
-
-/** Every check that does not depend on who approved it. */
-async function prepare(request: OperationRequest): Promise<Prepared> {
-  if (safeModeOn()) {
-    throw new OperationError("SAFE_MODE", "Actions are off in safe mode");
-  }
-  if ((request.depth ?? 0) > MAX_EVENT_DEPTH) {
-    throw new OperationError("TOO_DEEP", "Too many actions led to this one");
-  }
-
-  const registration = getAction(request.actionId);
-  if (!registration) {
-    throw new OperationError(
-      "NOT_FOUND",
-      `No action "${request.actionId}" is available`,
-    );
-  }
-  const { action, pluginId } = registration;
-  const plugin = await loadedPlugin(pluginId);
-  if (plugin?.state !== "active" || draining.has(pluginId)) {
-    throw new OperationError("UNAVAILABLE", `${pluginId} is not running`);
-  }
-  // Rechecked at use, so revoking the grant stops it on the next call.
-  if (
-    !(await hasCapability(
-      pluginId,
-      "operations:provide",
-      plugin.manifest.capabilities,
-    ))
-  ) {
-    throw new OperationError("UNAVAILABLE", `${pluginId} may not run actions`);
-  }
-
-  const parsed = parseOperationInput(action.inputs, request.input);
-  if (parsed.errors.length > 0) {
-    throw new OperationError(
-      "INVALID_INPUT",
-      parsed.errors.join("; "),
-      parsed.errors,
-    );
-  }
-
-  const permissions = PermissionManager.getInstance();
-  const permission = qualifyPermission(pluginId, action.permission);
-  if (!(await permissions.hasPermission(request.userId, permission))) {
-    throw new OperationError(
-      "FORBIDDEN",
-      `This needs the ${permission} permission`,
-    );
-  }
-
-  let host: OperationHost | null = null;
-  if (action.scope !== "server") {
-    if (request.hostId === undefined) {
-      throw new OperationError("INVALID_INPUT", "This action needs a host");
-    }
-    if (action.scope === "resource" && !request.resourceKey) {
-      throw new OperationError("INVALID_INPUT", "This action needs a target");
-    }
-    const access = await permissions.canAccessHost(
-      request.userId,
-      request.hostId,
-      action.hostAccess ?? "edit",
-    );
-    if (!access.hasAccess) {
-      throw new OperationError(
-        "FORBIDDEN",
-        `You need ${action.hostAccess ?? "edit"} access to this host`,
-      );
-    }
-    host = await loadOperationHost(request.hostId, plugin.manifest);
-    if (!host) throw new OperationError("NOT_FOUND", "Host not found");
-    if (!matchesWhen(action.when, host)) {
-      throw new OperationError(
-        "UNAVAILABLE",
-        "This action does not apply to this host",
-      );
-    }
-  }
-
-  // A claim by the plugin, so only signed official plugins are taken at
-  // their word when rules decide what needs a person.
-  const official =
-    plugin.source === "bundled" || plugin.signedTier === "official";
-  const effectiveRisk: OperationRisk =
-    !official && action.risk === "read" ? "change" : action.risk;
-
-  return {
-    registration,
-    action,
-    pluginVersion: plugin.manifest.version,
-    input: parsed.values,
-    host,
-    effectiveRisk,
-  };
-}
-
-function checkKeyScope(request: OperationRequest, action: OperationAction) {
-  const scopes = request.apiKeyScopes;
-  if (scopes === undefined || scopes === null) return;
-  if (scopes.includes("operations:run")) return;
-  if (scopes.includes("operations:read") && action.risk === "read") return;
-  throw new OperationError("SCOPE", "This API key may not run this action");
-}
-
-function originText(origin: ActorOrigin): string {
-  return JSON.stringify(origin);
-}
-
-function auditRun(
-  request: OperationRequest,
-  username: string,
-  action: OperationAction,
-  host: OperationHost | null,
-  success: boolean,
-  errorMessage?: string,
-  verb = "operation_run",
-): void {
-  void logAudit({
-    userId: request.userId,
-    username,
-    action: verb,
-    resourceType: "operation",
-    resourceId: action.id,
-    resourceName: host?.name ?? undefined,
-    details: originText(request.origin),
-    success,
-    errorMessage,
-  }).catch(() => {});
-}
-
-async function execute(
-  prepared: Prepared,
-  request: OperationRequest,
-  runId: string | null,
-  username: string,
-): Promise<OperationOutcome> {
-  const { action, registration, input, host } = prepared;
-  const repository = createCurrentOperationRepository();
-  const controller = new AbortController();
-  const dryRun = request.dryRun === true;
-  const timeoutMs =
-    action.timeoutMs ??
-    (action.risk === "read" ? READ_TIMEOUT_MS : DEFAULT_TIMEOUT_MS);
-  const lines: string[] = [];
-  const context = {
-    hostId: request.hostId,
-    resourceKey: request.resourceKey,
-    runId,
-    dryRun,
-    signal: controller.signal,
-    log: (line: string) => {
-      if (lines.length < 200) lines.push(line);
-    },
-  };
-
-  const work = async () => {
-    if (dryRun && action.dryRun !== "native") {
-      const summary = registration.handler.describe
-        ? await registration.handler.describe(input, context)
-        : `Would run ${action.id}`;
-      return { summary, changed: false };
-    }
-    return registration.handler.run(input, context);
-  };
-
-  const timer = setTimeout(() => controller.abort(), timeoutMs);
-  timer.unref?.();
-  const aborted = new Promise<never>((_, reject) => {
-    controller.signal.addEventListener("abort", () =>
-      reject(new Error("The action was stopped or timed out")),
-    );
-  });
-  aborted.catch(() => {});
-
-  // Settles when the handler really stops, which can be after the run gives
-  // up on it. A plugin going down waits on this, not on the run.
-  let handlerStopped: () => void = () => {};
-  const stopped = new Promise<void>((resolve) => {
-    handlerStopped = resolve;
-  });
-
-  const startWork = () => {
-    // Cancelled while waiting for a slot, so it never starts.
-    if (controller.signal.aborted) {
-      handlerStopped();
-      return aborted;
-    }
-    const handling = Promise.resolve().then(work);
-    void handling.finally(handlerStopped).catch(() => {});
-    return Promise.race([handling, aborted]);
-  };
-
-  const running = withLimits(
-    { hostId: request.hostId, exclusive: action.exclusive },
-    () =>
-      runAsActor(request.userId, "service", startWork, undefined, {
-        origin: request.origin,
-        apiKeyScopes: request.apiKeyScopes,
-        runId: runId ?? undefined,
-        depth: (request.depth ?? 0) + 1,
-      }),
-  );
-  if (runId) {
-    active.set(runId, {
-      pluginId: registration.pluginId,
-      controller,
-      done: stopped,
-    });
-  }
-
-  let outcome: OperationOutcome;
-  try {
-    const result = await running;
-    const data = redactFields(action.outputs, result.data);
-    outcome = {
-      runId,
-      status: "success",
-      summary: result.summary,
-      changed: result.changed,
-      data,
-    };
-    if (runId) {
-      await repository.updateRunFrom(runId, "running", {
-        status: "success",
-        summary: capText(result.summary ?? "", 2000),
-        changed: result.changed ?? null,
-        output:
-          data === undefined ? null : capText(JSON.stringify(data), MAX_OUTPUT),
-        undoInput: result.undoInput ? JSON.stringify(result.undoInput) : null,
-        sealedInput: null,
-        finishedAt: now(),
-      });
-    }
-  } catch (error) {
-    const needsPerson =
-      (error as { code?: unknown } | null)?.code === "NEEDS_INTERACTION";
-    const stopping = draining.has(registration.pluginId);
-    const status = needsPerson
-      ? "needs_interaction"
-      : stopping
-        ? "interrupted"
-        : "failed";
-    const message = stopping
-      ? "The plugin stopped during this run. Check the host."
-      : capText(errorText(error), 2000);
-    outcome = { runId, status, error: message };
-    if (needsPerson) outcome.errorCode = "NEEDS_INTERACTION";
-    if (runId) {
-      await repository.updateRunFrom(runId, "running", {
-        status,
-        error: message,
-        errorCode: outcome.errorCode ?? null,
-        sealedInput: null,
-        finishedAt: now(),
-      });
-    }
-  } finally {
-    clearTimeout(timer);
-    if (runId && !draining.has(registration.pluginId)) active.delete(runId);
-  }
-
-  if (action.risk !== "read" && !dryRun) {
-    if (request.hostId !== undefined && outcome.status === "success") {
-      dropResourceCache(request.hostId);
-    }
-    auditRun(
-      request,
-      username,
-      action,
-      host,
-      outcome.status === "success",
-      outcome.error,
-    );
-    void emitOperationEvent({
-      eventId:
-        outcome.status === "success"
-          ? "operation.succeeded"
-          : "operation.failed",
-      pluginId: registration.pluginId,
-      hostId: request.hostId,
-      severity: outcome.status === "success" ? "info" : "warning",
-      payload: {
-        actionId: action.id,
-        summary: outcome.summary,
-        error: outcome.error,
-        origin: request.origin,
-      },
-      runId: runId ?? undefined,
-      depth: (request.depth ?? 0) + 1,
-    });
-  }
-  return outcome;
-}
-
-function outcomeOf(
-  run: OperationRunRecord,
-  approvalId?: string,
-): OperationOutcome {
-  return {
-    runId: run.id,
-    status: run.status,
-    summary: run.summary ?? undefined,
-    changed: run.changed ?? undefined,
-    error: run.error ?? undefined,
-    errorCode: run.errorCode ?? undefined,
-    approvalId,
-  };
-}
-
-async function requestApproval(
-  prepared: Prepared,
-  request: OperationRequest,
-  decision: ApprovalDecision,
-  run: { id: string; username: string; createdAt: string },
-): Promise<OperationOutcome> {
-  const { action, host, input } = prepared;
-  const repository = createCurrentOperationRepository();
-  const snapshot: ApprovalSnapshot = {
-    runId: run.id,
-    actionId: action.id,
-    actionVersion: action.version ?? 1,
-    pluginVersion: prepared.pluginVersion,
-    hostId: request.hostId ?? null,
-    hostUpdatedAt: host?.updatedAt ?? null,
-    resourceKey: request.resourceKey ?? null,
-    input,
-  };
-  await repository.updateRunFrom(run.id, "created", {
-    status: "pending_approval",
-    summary: decision.reason ?? null,
-    sealedInput: await encryptSystemSecret(JSON.stringify(snapshot)),
-  });
-  const minutes = decision.expiresInMinutes ?? DEFAULT_APPROVAL_MINUTES;
-  const approvalId = randomUUID();
-  await repository.insertApproval({
-    id: approvalId,
-    runId: run.id,
-    requestedBy: request.userId,
-    reason: decision.reason ?? null,
-    allowSelf: decision.allowSelf === true || canSelfApprove(request.origin),
-    status: "pending",
-    createdAt: run.createdAt,
-    expiresAt: new Date(Date.now() + minutes * 60_000).toISOString(),
-  });
-  void emitOperationEvent({
-    eventId: "operation.approval-requested",
-    pluginId: prepared.registration.pluginId,
-    hostId: request.hostId,
-    severity: "warning",
-    payload: { actionId: action.id, approvalId },
-    runId: run.id,
-  });
-  return { runId: run.id, status: "pending_approval", approvalId };
-}
-
-/** Runs an action, or parks it for approval. Throws OperationError if refused. */
-export async function runOperation(
-  request: OperationRequest,
-): Promise<OperationOutcome> {
-  const registration = getAction(request.actionId);
-  if (registration) checkKeyScope(request, registration.action);
-
-  const repository = createCurrentOperationRepository();
-  if (request.idempotencyKey) {
-    const earlier = await repository.findByIdempotencyKey(
-      request.userId,
-      request.idempotencyKey,
-    );
-    if (earlier) return outcomeOf(earlier);
-  }
-
-  const prepared = await prepare(request);
-  const { action } = prepared;
-  const dryRun = request.dryRun === true;
-  const isRead = action.risk === "read";
-
-  if (action.risk === "destructive" && !dryRun && !request.confirmed) {
-    throw new OperationError("NEEDS_CONFIRM", "This action needs a confirm");
-  }
-
-  let decision: ApprovalDecision = { decision: "allow" };
-  if (!dryRun && !request.internal) {
-    decision = await evaluateApproval({
-      actionId: action.id,
-      pluginId: prepared.registration.pluginId,
-      risk: action.risk,
-      effectiveRisk: prepared.effectiveRisk,
-      origin: request.origin,
-      userId: request.userId,
-      hostId: request.hostId,
-      hostTags: prepared.host?.tags,
-      batchId: request.batchId,
-    });
-  }
-  const username = await usernameOf(request.userId);
-  if (decision.decision === "deny") {
-    auditRun(
-      request,
-      username,
-      action,
-      prepared.host,
-      false,
-      decision.reason,
-      "operation_denied",
-    );
-    throw new OperationError(
-      "DENIED",
-      decision.reason ?? "A rule refused this action",
-    );
-  }
-
-  // Internal reads poll constantly and would flood history and the save loop.
-  if (request.internal && isRead) {
-    return execute(prepared, request, null, username);
-  }
-
-  const run = {
-    id: randomUUID(),
-    actionId: action.id,
-    actionVersion: action.version ?? 1,
-    pluginId: prepared.registration.pluginId,
-    pluginVersion: prepared.pluginVersion,
-    userId: request.userId,
-    username,
-    origin: originText(request.origin),
-    hostId: request.hostId ?? null,
-    hostName: prepared.host?.name ?? null,
-    batchId: request.batchId ?? null,
-    dryRun,
-    risk: action.risk,
-    status: decision.decision === "approve" ? "created" : "running",
-    input: JSON.stringify(redactFields(action.inputs, prepared.input)),
-    undoOf: request.undoOf ?? null,
-    idempotencyKey: request.idempotencyKey ?? null,
-    createdAt: now(),
-    startedAt: decision.decision === "approve" ? null : now(),
-  };
-  await repository.insertRun(run);
-
-  if (decision.decision === "approve") {
-    return requestApproval(prepared, request, decision, run);
-  }
-  return execute(prepared, request, run.id, username);
-}
-
-function originOf(run: OperationRunRecord): ActorOrigin {
-  try {
-    return JSON.parse(run.origin) as ActorOrigin;
-  } catch {
-    return { kind: "api" };
-  }
-}
-
-async function failStale(run: OperationRunRecord, why: string): Promise<void> {
-  await createCurrentOperationRepository().updateRunFrom(
-    run.id,
-    "pending_approval",
-    {
-      status: "rejected",
-      error: why,
-      sealedInput: null,
-      finishedAt: now(),
-    },
-  );
-}
-
-/**
- * Records a person's decision. One shot: the row moves from pending once, so a
- * second click or a replay does nothing. What runs is the sealed copy, never
- * what the caller sends now.
- */
-export async function decideOperationApproval(options: {
-  approvalId: string;
-  approverId: string;
-  approve: boolean;
-  comment?: string;
-  impersonated?: boolean;
-}): Promise<OperationOutcome> {
-  const { approvalId, approverId, approve, comment } = options;
-  const repository = createCurrentOperationRepository();
-  const approval = await repository.findApproval(approvalId);
-  if (!approval) throw new OperationError("NOT_FOUND", "Approval not found");
-  if (approval.status !== "pending") {
-    throw new OperationError("CONFLICT", "This was already decided");
-  }
-  const run = await repository.findRun(approval.runId);
-  if (!run) throw new OperationError("NOT_FOUND", "Run not found");
-
-  if (options.impersonated) {
-    throw new OperationError("FORBIDDEN", "You cannot approve as another user");
-  }
-  if (approval.requestedBy === approverId && !approval.allowSelf) {
-    throw new OperationError(
-      "FORBIDDEN",
-      "Someone else has to approve your request",
-    );
-  }
-
-  if (new Date(approval.expiresAt).getTime() < Date.now()) {
-    await repository.decideApproval(approvalId, "expired", null, null, now());
-    await failStale(run, "The approval expired");
-    throw new OperationError("STALE", "This approval expired");
-  }
-
-  // Approving needs the same rights as running it.
-  const registration = getAction(run.actionId);
-  if (registration) {
-    const permissions = PermissionManager.getInstance();
-    const needed = qualifyPermission(
-      registration.pluginId,
-      registration.action.permission,
-    );
-    const allowed =
-      (await permissions.hasPermission(approverId, needed)) &&
-      (run.hostId === null ||
-        (
-          await permissions.canAccessHost(
-            approverId,
-            run.hostId,
-            registration.action.hostAccess ?? "edit",
-          )
-        ).hasAccess);
-    if (!allowed) {
-      throw new OperationError(
-        "FORBIDDEN",
-        "You need the same access as this action to approve it",
-      );
-    }
-  }
-
-  const won = await repository.decideApproval(
-    approvalId,
-    approve ? "approved" : "rejected",
-    approverId,
-    comment?.slice(0, 500) ?? null,
-    now(),
-  );
-  if (!won) throw new OperationError("CONFLICT", "This was already decided");
-
-  const username = await usernameOf(approverId);
-  void logAudit({
-    userId: approverId,
-    username,
-    action: approve ? "operation_approved" : "operation_rejected",
-    resourceType: "operation",
-    resourceId: run.actionId,
-    details: run.id,
-    success: true,
-  }).catch(() => {});
-
-  if (!approve) {
-    await repository.updateRunFrom(run.id, "pending_approval", {
-      status: "rejected",
-      sealedInput: null,
-      finishedAt: now(),
-    });
-    return { runId: run.id, status: "rejected" };
-  }
-  return runApproved(run, approval);
-}
-
-async function readSnapshot(
-  run: OperationRunRecord,
-): Promise<ApprovalSnapshot | null> {
-  if (!run.sealedInput || !isSystemEncrypted(run.sealedInput)) return null;
-  try {
-    const snapshot = JSON.parse(
-      await decryptSystemSecret(run.sealedInput),
-    ) as ApprovalSnapshot;
-    return snapshot.runId === run.id ? snapshot : null;
-  } catch {
-    return null;
-  }
-}
-
-async function runApproved(
-  run: OperationRunRecord,
-  approval: OperationApprovalRecord,
-): Promise<OperationOutcome> {
-  const snapshot = await readSnapshot(run);
-  if (!snapshot || !run.userId) {
-    await failStale(run, "The approved request could not be read");
-    throw new OperationError("STALE", "The approved request could not be read");
-  }
-
-  const request: OperationRequest = {
-    actionId: snapshot.actionId,
-    hostId: snapshot.hostId ?? undefined,
-    resourceKey: snapshot.resourceKey ?? undefined,
-    input: snapshot.input,
-    confirmed: true,
-    batchId: run.batchId ?? undefined,
-    userId: run.userId,
-    origin: originOf(run),
-  };
-
-  // The requester's own rights, as of now. They may have changed.
-  let prepared: Prepared;
-  try {
-    prepared = await prepare(request);
-  } catch (error) {
-    await failStale(run, errorText(error));
-    throw error;
-  }
-
-  const changedSince =
-    prepared.pluginVersion !== snapshot.pluginVersion ||
-    (prepared.action.version ?? 1) !== snapshot.actionVersion ||
-    (prepared.host?.updatedAt ?? null) !== snapshot.hostUpdatedAt;
-  if (changedSince) {
-    await failStale(run, "The host or plugin changed after this was requested");
-    throw new OperationError(
-      "STALE",
-      "The host or plugin changed after this was requested",
-    );
-  }
-
-  const repository = createCurrentOperationRepository();
-  const claimed = await repository.updateRunFrom(run.id, "pending_approval", {
-    status: "running",
-    startedAt: now(),
-  });
-  if (!claimed) throw new OperationError("CONFLICT", "This already ran");
-
-  const outcome = await execute(prepared, request, run.id, run.username);
-  return { ...outcome, approvalId: approval.id };
-}
-
-export async function cancelOperationRun(
-  run: OperationRunRecord,
-): Promise<boolean> {
-  const repository = createCurrentOperationRepository();
-  if (run.status === "pending_approval") {
-    const approval = await repository.findApprovalForRun(run.id);
-    if (approval) {
-      await repository.decideApproval(
-        approval.id,
-        "rejected",
-        null,
-        "cancelled",
-        now(),
-      );
-    }
-    return repository.updateRunFrom(run.id, "pending_approval", {
-      status: "cancelled",
-      sealedInput: null,
-      finishedAt: now(),
-    });
-  }
-  const running = active.get(run.id);
-  if (!running) return false;
-  running.controller.abort();
-  return true;
-}
-
-/**
- * Called when a plugin stops, before its SSH connections are torn down. New
- * runs are refused and running ones told to stop. Anything still going after
- * the wait has an unknown outcome and is never retried.
- */
-export async function drainPlugin(pluginId: string): Promise<void> {
-  draining.add(pluginId);
-  try {
-    const runs = [...active.entries()].filter(
-      ([, entry]) => entry.pluginId === pluginId,
-    );
-    if (runs.length === 0) return;
-    for (const [, entry] of runs) entry.controller.abort();
-    await Promise.race([
-      Promise.all(runs.map(([, entry]) => entry.done)),
-      new Promise((resolve) => setTimeout(resolve, DRAIN_WAIT_MS)),
-    ]);
-    const repository = createCurrentOperationRepository();
-    for (const [runId] of runs) {
-      await repository.updateRunFrom(runId, "running", {
-        status: "interrupted",
-        error: "The plugin stopped during this run. Check the host.",
-        sealedInput: null,
-        finishedAt: now(),
-      });
-      active.delete(runId);
-    }
-  } catch (error) {
-    pluginLogger.warn("Could not finish stopping runs", {
-      operation: "operation_drain",
-      pluginId,
-      error: errorText(error),
-    });
-  } finally {
-    draining.delete(pluginId);
-  }
-}
-
-export function riskAtLeast(
-  risk: OperationRisk,
-  floor: OperationRisk,
-): boolean {
-  return riskRank(risk) >= riskRank(floor);
-}
-
-/** Test seam. */
-export function clearOperationGate(): void {
-  active.clear();
-  draining.clear();
-}
@@ -1,68 +0,0 @@
-/**
- * The small view of a host the operations layer needs: enough to name it, test
- * an action's `when`, and notice it changed. No secret field is ever read here.
- */
-
-import type { OperationWhen } from "@termix-ssh/plugin-sdk/operations";
-import type { PluginManifest } from "../plugins/manifest.js";
-import { getSetting } from "../plugins/settings.js";
-import { createCurrentHostResolutionRepository } from "../database/repositories/factory.js";
-
-export interface OperationHost {
-  id: number;
-  name: string;
-  updatedAt: string | null;
-  tags: string[];
-  os: string | null;
-  /** Only the setting keys some `when` asks about. */
-  settings: Record<string, unknown>;
-}
-
-export function splitTags(tags: string | null | undefined): string[] {
-  return (tags ?? "")
-    .split(",")
-    .map((tag) => tag.trim())
-    .filter(Boolean);
-}
-
-async function settingsFor(
-  manifest: PluginManifest,
-  hostId: number,
-): Promise<Record<string, unknown>> {
-  const keys = new Set<string>();
-  for (const action of manifest.contributes?.operations?.actions ?? []) {
-    for (const key of Object.keys(action.when?.settings ?? {})) keys.add(key);
-  }
-  const settings: Record<string, unknown> = {};
-  for (const key of keys) {
-    settings[key] = await getSetting(manifest, "host", hostId, key);
-  }
-  return settings;
-}
-
-/** A host with the settings its plugin's `when` rules read. */
-export async function loadOperationHost(
-  hostId: number,
-  manifest: PluginManifest,
-): Promise<OperationHost | null> {
-  const repository = createCurrentHostResolutionRepository();
-  const ownerId = await repository.findHostOwnerId(hostId);
-  if (!ownerId) return null;
-  const host = (await repository.findHostById(hostId, ownerId)) as {
-    name: string | null;
-    ip: string;
-    tags: string | null;
-    updatedAt?: string | null;
-  } | null;
-  if (!host) return null;
-  return {
-    id: hostId,
-    name: host.name || host.ip,
-    updatedAt: host.updatedAt ?? null,
-    tags: splitTags(host.tags),
-    os: null,
-    settings: await settingsFor(manifest, hostId),
-  };
-}
-
-export type { OperationWhen };
@@ -1,44 +0,0 @@
-/**
- * What a scoped API key may reach. Enforced where keys are authenticated, so a
- * limited key cannot step around the gate through /plugin-api or a ws ticket. A
- * key with no scopes has full access, which is every key made before this.
- */
-
-export const API_KEY_SCOPES = ["operations:read", "operations:run"] as const;
-
-const MCP_PATH = /^\/plugin-api\/[a-z0-9-]+\/mcp(\/|$)/;
-const OPERATIONS_PATH = /^\/operations(\/|$)/;
-
-export function parseKeyScopes(
-  raw: string | null | undefined,
-): string[] | null {
-  if (!raw) return null;
-  try {
-    const value = JSON.parse(raw);
-    return Array.isArray(value)
-      ? value.filter((scope): scope is string => typeof scope === "string")
-      : [];
-  } catch {
-    // Unreadable means no access, not full access.
-    return [];
-  }
-}
-
-export function keyScopeAllows(
-  scopes: string[] | null,
-  method: string,
-  path: string,
-): boolean {
-  if (scopes === null) return true;
-  const clean = path.split("?")[0];
-  if (MCP_PATH.test(clean)) {
-    return (
-      scopes.includes("operations:read") || scopes.includes("operations:run")
-    );
-  }
-  if (!OPERATIONS_PATH.test(clean)) return false;
-  if (scopes.includes("operations:run")) return true;
-  if (!scopes.includes("operations:read")) return false;
-  // The gate still checks each action's risk on a run.
-  return method === "GET" || /^\/operations\/[^/]+\/run$/.test(clean);
-}
@@ -1,90 +0,0 @@
-/**
- * Caps on how much runs at once. The SSH pool caps per key, not per host, so a
- * large rollout or an all hosts table needs its own limit here.
- */
-
-export const MAX_RUNNING = 32;
-export const MAX_PER_HOST = 3;
-
-class Slots {
-  private used = 0;
-  private readonly waiting: (() => void)[] = [];
-
-  constructor(private readonly size: number) {}
-
-  async take(): Promise<void> {
-    if (this.used < this.size) {
-      this.used++;
-      return;
-    }
-    await new Promise<void>((resolve) => this.waiting.push(resolve));
-  }
-
-  give(): void {
-    const next = this.waiting.shift();
-    if (next) next();
-    else this.used--;
-  }
-
-  get idle(): boolean {
-    return this.used === 0 && this.waiting.length === 0;
-  }
-}
-
-const everything = new Slots(MAX_RUNNING);
-const perHost = new Map<number, Slots>();
-const exclusive = new Map<number, Slots>();
-
-function slotsFor(
-  map: Map<number, Slots>,
-  hostId: number,
-  size: number,
-): Slots {
-  let slots = map.get(hostId);
-  if (!slots) {
-    slots = new Slots(size);
-    map.set(hostId, slots);
-  }
-  return slots;
-}
-
-/** Runs `work` once there is room. Exclusive work on a host goes one at a time. */
-export async function withLimits<T>(
-  options: { hostId?: number; exclusive?: boolean },
-  work: () => Promise<T>,
-): Promise<T> {
-  const { hostId } = options;
-  const held: { map?: Map<number, Slots>; slots: Slots }[] = [];
-  const hold = async (slots: Slots, map?: Map<number, Slots>) => {
-    await slots.take();
-    held.push({ slots, map });
-  };
-
-  try {
-    // Same order everywhere, so two runs cannot wait on each other.
-    if (hostId !== undefined && options.exclusive) {
-      await hold(slotsFor(exclusive, hostId, 1), exclusive);
-    }
-    if (hostId !== undefined) {
-      await hold(slotsFor(perHost, hostId, MAX_PER_HOST), perHost);
-    }
-    await hold(everything);
-    return await work();
-  } finally {
-    for (const { slots, map } of held.reverse()) {
-      slots.give();
-      if (map && hostId !== undefined && slots.idle) map.delete(hostId);
-    }
-  }
-}
-
-/** Shares one in-flight promise per key, so one read serves every waiter. */
-const inflight = new Map<string, Promise<unknown>>();
-
-export function coalesce<T>(key: string, work: () => Promise<T>): Promise<T> {
-  const running = inflight.get(key);
-  if (running) return running as Promise<T>;
-  const started = work().finally(() => inflight.delete(key));
-  inflight.set(key, started);
-  return started;
-}
@@ -1,47 +0,0 @@
-/** Startup sweep and periodic cleanup for runs, approvals and events. */
-
-import { RETENTION_DAYS } from "./constants.js";
-import { pluginLogger } from "../utils/logger.js";
-import { createCurrentOperationRepository } from "../database/repositories/factory.js";
-
-const SWEEP_MS = 10 * 60_000;
-
-let timer: ReturnType<typeof setInterval> | null = null;
-
-/** Parks expired approvals and trims history. Returns rows removed. */
-export async function sweepOperations(at = new Date()): Promise<number> {
-  const repository = createCurrentOperationRepository();
-  const iso = at.toISOString();
-  for (const approval of await repository.listExpiredApprovals(iso)) {
-    await repository.decideApproval(approval.id, "expired", null, null, iso);
-    await repository.updateRunFrom(approval.runId, "pending_approval", {
-      status: "expired",
-      sealedInput: null,
-      finishedAt: iso,
-    });
-  }
-  const cutoff = new Date(at.getTime() - RETENTION_DAYS * 86_400_000);
-  return repository.prune(cutoff.toISOString());
-}
-
-/** Anything still running at boot lost its process, so its outcome is unknown. */
-export async function startOperationsMaintenance(): Promise<void> {
-  await createCurrentOperationRepository().markRunningInterrupted(
-    new Date().toISOString(),
-  );
-  await sweepOperations();
-  timer ??= setInterval(() => {
-    sweepOperations().catch((error) => {
-      pluginLogger.warn("Operations cleanup failed", {
-        operation: "operations_sweep",
-        error: error instanceof Error ? error.message : String(error),
-      });
-    });
-  }, SWEEP_MS);
-  timer.unref?.();
-}
-
-export function stopOperationsMaintenance(): void {
-  if (timer) clearInterval(timer);
-  timer = null;
-}
@@ -1,84 +0,0 @@
-/**
- * Handlers plugins registered for the actions their manifest declares.
- *
- * Same generation rule as service-registry.ts: a plugin that crashed and
- * restarted must not have its old disposer remove the new registration, and a
- * run that resolved a handler before a reload must not call the stale one.
- */
-
-import type {
-  OperationAction,
-  OperationResult,
-} from "@termix-ssh/plugin-sdk/operations";
-
-export interface OperationRunContext {
-  hostId?: number;
-  resourceKey?: string;
-  runId: string | null;
-  dryRun: boolean;
-  signal: AbortSignal;
-  log: (line: string) => void;
-}
-
-export interface OperationHandler {
-  run: (
-    input: Record<string, unknown>,
-    context: OperationRunContext,
-  ) => Promise<OperationResult> | OperationResult;
-  /** What a dry run reports when the action has no native dry run. */
-  describe?: (
-    input: Record<string, unknown>,
-    context: OperationRunContext,
-  ) => string | Promise<string>;
-}
-
-export interface OperationRegistration {
-  pluginId: string;
-  action: OperationAction;
-  handler: OperationHandler;
-  generation: number;
-}
-
-const registrations = new Map<string, OperationRegistration>();
-let generationCounter = 0;
-
-export function registerAction(
-  pluginId: string,
-  action: OperationAction,
-  handler: OperationHandler,
-): OperationRegistration {
-  const existing = registrations.get(action.id);
-  if (existing && existing.pluginId !== pluginId) {
-    throw new Error(
-      `Action "${action.id}" is already registered by ${existing.pluginId}`,
-    );
-  }
-  const entry = {
-    pluginId,
-    action,
-    handler,
-    generation: ++generationCounter,
-  };
-  registrations.set(action.id, entry);
-  return entry;
-}
-
-/** Removes only the exact registration given. */
-export function revokeAction(registration: OperationRegistration): boolean {
-  const current = registrations.get(registration.action.id);
-  if (!current || current.generation !== registration.generation) return false;
-  return registrations.delete(registration.action.id);
-}
-
-export function getAction(id: string): OperationRegistration | undefined {
-  return registrations.get(id);
-}
-
-export function listActions(): OperationRegistration[] {
-  return [...registrations.values()];
-}
-
-/** Test seam. */
-export function clearOperationRegistry(): void {
-  registrations.clear();
-}
@@ -1,231 +0,0 @@
-/**
- * Reads for All hosts tables and status tiles.
- *
- * Asking every host over SSH on each page load cannot hold up, so a request
- * answers right away from memory and refreshes stale hosts behind it. The page
- * polls and the table fills in as hosts answer. Results stay in memory, never
- * SQLite, since a save rewrites the whole database.
- *
- * Keys include the user: someone a host is shared with can have their own
- * login there and see different rows.
- */
-
-import type {
-  ResourceListResult,
-  SignalResult,
-  SignalStatus,
-} from "@termix-ssh/plugin-sdk/operations";
-import { RESOURCE_FRESH_MS } from "./constants.js";
-import { coalesce } from "./limits.js";
-import { getAction } from "./registry.js";
-import { matchesWhen } from "@termix-ssh/plugin-sdk/operations";
-import { loadOperationHost } from "./hosts.js";
-import type { ActorOrigin } from "../plugins/actor.js";
-import { hostStatus } from "../plugins/host-status-provider.js";
-import { PermissionManager } from "../utils/permission-manager.js";
-import { loadProbeTargets } from "../plugins/ctx-probe.js";
-
-export type HostReadState =
-  "ok" | "loading" | "offline" | "error" | "no-access" | "not-applicable";
-
-interface CacheEntry {
-  value: unknown;
-  error?: string;
-  fetchedAt: number;
-}
-
-export interface HostRead<T> {
-  hostId: number;
-  state: HostReadState;
-  value?: T;
-  error?: string;
-  fetchedAt?: string;
-}
-
-const cache = new Map<string, CacheEntry>();
-const MAX_ENTRIES = 20_000;
-
-function cacheKey(userId: string, actionId: string, hostId: number): string {
-  return `${userId}|${actionId}|${hostId}`;
-}
-
-/** After a change, the next read of this host goes back to the host. */
-export function dropResourceCache(hostId: number): void {
-  const suffix = `|${hostId}`;
-  for (const key of cache.keys()) {
-    if (key.endsWith(suffix)) cache.delete(key);
-  }
-}
-
-function remember(key: string, entry: CacheEntry): void {
-  if (cache.size >= MAX_ENTRIES) {
-    const oldest = cache.keys().next().value;
-    if (oldest) cache.delete(oldest);
-  }
-  cache.delete(key);
-  cache.set(key, entry);
-}
-
-function isOffline(hostId: number): boolean {
-  const status = hostStatus.get(hostId) as
-    string | { status?: string } | null | undefined;
-  const value = typeof status === "string" ? status : status?.status;
-  return value === "offline";
-}
-
-interface ReadOptions {
-  userId: string;
-  actionId: string;
-  hostIds?: number[];
-  refresh?: boolean;
-  input?: Record<string, unknown>;
-  origin: ActorOrigin;
-}
-
-function refreshHost(
-  options: ReadOptions,
-  hostId: number,
-  key: string,
-): Promise<unknown> {
-  return coalesce(key, async () => {
-    const { runOperation, OperationError } = await import("./gate.js");
-    try {
-      const outcome = await runOperation({
-        actionId: options.actionId,
-        hostId,
-        input: options.input,
-        internal: true,
-        userId: options.userId,
-        origin: options.origin,
-      });
-      if (outcome.status !== "success") {
-        remember(key, {
-          value: undefined,
-          error: outcome.error ?? outcome.status,
-          fetchedAt: Date.now(),
-        });
-        return;
-      }
-      remember(key, { value: outcome.data, fetchedAt: Date.now() });
-    } catch (error) {
-      remember(key, {
-        value: undefined,
-        error:
-          error instanceof OperationError || error instanceof Error
-            ? error.message
-            : String(error),
-        fetchedAt: Date.now(),
-      });
-    }
-  });
-}
-
-/** One entry per host the user can reach. Never waits on a host. */
-export async function readAcrossHosts<T>(
-  options: ReadOptions,
-): Promise<HostRead<T>[]> {
-  const registration = getAction(options.actionId);
-  if (!registration) return [];
-  const { action } = registration;
-  const { getPluginRuntime } = await import("../plugins/index.js");
-  const manifest = getPluginRuntime().loader.get(
-    registration.pluginId,
-  )?.manifest;
-  if (!manifest) return [];
-
-  const permissions = PermissionManager.getInstance();
-  const targets = await loadProbeTargets(options.userId, options.hostIds);
-  const reads: HostRead<T>[] = [];
-
-  for (const target of targets) {
-    const hostId = target.id;
-    const access = await permissions.canAccessHost(
-      options.userId,
-      hostId,
-      action.hostAccess ?? "connect",
-    );
-    if (!access.hasAccess) {
-      reads.push({ hostId, state: "no-access" });
-      continue;
-    }
-    if (action.when) {
-      const host = await loadOperationHost(hostId, manifest);
-      if (!host || !matchesWhen(action.when, host)) continue;
-    }
-
-    const key = cacheKey(options.userId, options.actionId, hostId);
-    const cached = cache.get(key);
-    const fresh = cached && Date.now() - cached.fetchedAt < RESOURCE_FRESH_MS;
-
-    if (isOffline(hostId)) {
-      reads.push({
-        hostId,
-        state: "offline",
-        value: cached?.value as T | undefined,
-        fetchedAt: cached
-          ? new Date(cached.fetchedAt).toISOString()
-          : undefined,
-      });
-      continue;
-    }
-    if (!fresh || options.refresh) void refreshHost(options, hostId, key);
-    if (!cached) {
-      reads.push({ hostId, state: "loading" });
-    } else if (cached.error) {
-      reads.push({
-        hostId,
-        state: "error",
-        error: cached.error,
-        fetchedAt: new Date(cached.fetchedAt).toISOString(),
-      });
-    } else {
-      reads.push({
-        hostId,
-        state: "ok",
-        value: cached.value as T,
-        fetchedAt: new Date(cached.fetchedAt).toISOString(),
-      });
-    }
-  }
-  return reads;
-}
-
-export interface ResourceRow {
-  hostId: number;
-  key: string;
-  row: Record<string, unknown>;
-}
-
-/** Flattens per host reads into table rows, keeping each host's state. */
-export function flattenResourceRows(
-  reads: HostRead<ResourceListResult>[],
-  keyField: string,
-): { rows: ResourceRow[]; hosts: Omit<HostRead<unknown>, "value">[] } {
-  const rows: ResourceRow[] = [];
-  const hosts: Omit<HostRead<unknown>, "value">[] = [];
-  for (const read of reads) {
-    const { value, ...state } = read;
-    hosts.push(state);
-    for (const row of value?.rows ?? []) {
-      rows.push({ hostId: read.hostId, key: String(row[keyField]), row });
-    }
-  }
-  return { rows, hosts };
-}
-
-const WORST: SignalStatus[] = ["fail", "warn", "unknown", "ok"];
-
-/** The worst status across hosts, for a server level tile. */
-export function worstStatus(
-  results: (SignalResult | undefined)[],
-): SignalStatus {
-  for (const status of WORST) {
-    if (results.some((result) => result?.status === status)) return status;
-  }
-  return "unknown";
-}
-
-/** Test seam. */
-export function clearResourceCache(): void {
-  cache.clear();
-}
@@ -20,28 +20,7 @@

 import { AsyncLocalStorage } from "node:async_hooks";

-/** How a call reached core, for run history and approval rules. */
-export interface ActorOrigin {
-  kind: "ui" | "api" | "plugin";
-  /** Which plugin asked, set by core from the ctx that made the call. */
-  pluginId?: string;
-  /** What the plugin was doing: automation, assistant, mcp, rollout and so on. */
-  via?: string;
-}
-
-/** Follows a call through plugin work, so nothing loses who started it. */
-export interface ActorTrail {
-  origin?: ActorOrigin;
-  apiKeyId?: string;
-  /** Null means a key with full access. */
-  apiKeyScopes?: string[] | null;
-  /** The operation run this work belongs to. */
-  runId?: string;
-  /** How many operations or events led here. */
-  depth?: number;
-}
-
-interface ActorStore extends ActorTrail {
+interface ActorStore {
  userId: string;
  /** Where the identity came from, for the audit line. */
  source: "request" | "asUser" | "service";
@@ -56,34 +35,8 @@ export function runAsActor<T>(
  source: ActorStore["source"],
  fn: () => T,
  sessionId?: string,
-  trail?: ActorTrail,
 ): T {
-  const parent = storage.getStore();
-  return storage.run(
-    {
-      origin: parent?.origin,
-      apiKeyId: parent?.apiKeyId,
-      apiKeyScopes: parent?.apiKeyScopes,
-      runId: parent?.runId,
-      depth: parent?.depth,
-      ...trail,
-      userId,
-      source,
-      sessionId,
-    },
-    fn,
-  );
-}
-
-export function getActorTrail(): ActorTrail {
-  const store = storage.getStore();
-  return {
-    origin: store?.origin,
-    apiKeyId: store?.apiKeyId,
-    apiKeyScopes: store?.apiKeyScopes,
-    runId: store?.runId,
-    depth: store?.depth,
-  };
+  return storage.run({ userId, source, sessionId }, fn);
 }

 export function getActorSessionId(): string | undefined {
@@ -1,195 +0,0 @@
-/**
- * ctx.operations: declaring what a plugin can do, and asking for another
- * plugin's action to run.
- *
- * invoke acts for the current user, so on its own it would let any plugin spend
- * that user's full authority. It needs the capability, the action named in the
- * manifest's invokes list, and the origin always names the calling plugin, set
- * here from the closure rather than from anything the plugin passes.
- */
-
-import type {
-  PluginOperations,
-  PluginOperationInvokeOptions,
-} from "@termix-ssh/plugin-sdk/backend";
-import {
-  invokeAllowed,
-  type OperationAction,
-} from "@termix-ssh/plugin-sdk/operations";
-import type { PluginManifest } from "./manifest.js";
-import { assertCapability, capabilityRefused } from "./permissions.js";
-import { getActor, getActorTrail, type ActorOrigin } from "./actor.js";
-import type { DisposableBag } from "./disposables.js";
-import {
-  registerAction,
-  revokeAction,
-  type OperationHandler,
-} from "../operations/registry.js";
-import { provideApprovalPolicy } from "../operations/approvals.js";
-import {
-  emitOperationEvent,
-  subscribeOperationEvents,
-} from "../operations/events.js";
-import {
-  drainPlugin,
-  OperationError,
-  runOperation,
-} from "../operations/gate.js";
-import { buildCatalog } from "../operations/catalog.js";
-
-interface Deps {
-  manifest: PluginManifest;
-  bag: DisposableBag;
-}
-
-export function createPluginOperations({
-  manifest,
-  bag,
-}: Deps): PluginOperations {
-  const pluginId = manifest.id;
-  const declared = manifest.capabilities;
-  const contribution = manifest.contributes?.operations;
-  let drainRegistered = false;
-
-  const declaredAction = (id: string): OperationAction => {
-    const action = contribution?.actions?.find((entry) => entry.id === id);
-    if (!action) {
-      throw new Error(
-        `Plugin ${pluginId} cannot register action "${id}": it is not declared in contributes.operations`,
-      );
-    }
-    return action;
-  };
-
-  const actingUser = (): string => {
-    const userId = getActor();
-    if (!userId) {
-      throw new Error(
-        "ctx.operations needs an acting user: call it inside a request or ctx.asUser",
-      );
-    }
-    return userId;
-  };
-
-  return {
-    register: (id, handler) => {
-      if (!declared.includes("operations:provide")) {
-        throw capabilityRefused(pluginId, "operations:provide");
-      }
-      const registration = registerAction(
-        pluginId,
-        declaredAction(id),
-        handler as OperationHandler,
-      );
-      bag.add(() => void revokeAction(registration), `action "${id}"`);
-      // Added once and after the actions, so disposal, which runs newest
-      // first, drains before anything the handlers use is torn down.
-      if (!drainRegistered) {
-        drainRegistered = true;
-        bag.add(() => drainPlugin(pluginId), "operations drain");
-      }
-    },
-
-    // A plugin's own route running its own action, so a button press lands in
-    // the same history. The caller stays the origin, not this plugin.
-    run: async (actionId, options = {}) => {
-      if (!declared.includes("operations:provide")) {
-        throw capabilityRefused(pluginId, "operations:provide");
-      }
-      declaredAction(actionId);
-      const trail = getActorTrail();
-      return runOperation({
-        actionId,
-        hostId: options.hostId,
-        resourceKey: options.resourceKey,
-        input: options.input,
-        dryRun: options.dryRun,
-        confirmed: options.confirmed,
-        idempotencyKey: options.idempotencyKey,
-        batchId: options.batchId,
-        userId: actingUser(),
-        origin: trail.origin ?? { kind: "plugin", pluginId },
-        apiKeyScopes: trail.apiKeyScopes,
-        depth: trail.depth,
-      });
-    },
-
-    invoke: async (actionId, options = {}) => {
-      await assertCapability(pluginId, "operations:invoke", declared);
-      if (!invokeAllowed(contribution?.invokes, actionId)) {
-        throw new OperationError(
-          "FORBIDDEN",
-          `${pluginId} did not declare that it runs ${actionId}`,
-        );
-      }
-      const trail = getActorTrail();
-      const origin: ActorOrigin = {
-        kind: "plugin",
-        pluginId,
-        via: (options as PluginOperationInvokeOptions).via,
-      };
-      return runOperation({
-        actionId,
-        hostId: options.hostId,
-        resourceKey: options.resourceKey,
-        input: options.input,
-        dryRun: options.dryRun,
-        confirmed: options.confirmed,
-        idempotencyKey: options.idempotencyKey,
-        batchId: options.batchId,
-        userId: actingUser(),
-        origin,
-        apiKeyScopes: trail.apiKeyScopes,
-        depth: trail.depth,
-      });
-    },
-
-    list: async (options) => {
-      await assertCapability(pluginId, "operations:invoke", declared);
-      return buildCatalog({
-        userId: actingUser(),
-        lang: options?.lang,
-        surface: options?.surface,
-      });
-    },
-
-    emit: async (eventId, payload, options) => {
-      if (!declared.includes("operations:provide")) {
-        throw capabilityRefused(pluginId, "operations:provide");
-      }
-      const event = contribution?.events?.find((entry) => entry.id === eventId);
-      if (!event) {
-        throw new Error(
-          `Plugin ${pluginId} cannot emit "${eventId}": it is not declared in contributes.operations`,
-        );
-      }
-      await emitOperationEvent({
-        eventId,
-        pluginId,
-        hostId: options?.hostId,
-        severity: event.severity,
-        payload,
-      });
-    },
-
-    onEvent: (subscription) => {
-      if (!declared.includes("operations:invoke")) {
-        throw capabilityRefused(pluginId, "operations:invoke");
-      }
-      const remove = subscribeOperationEvents(pluginId, subscription);
-      bag.add(remove, `events "${subscription.pattern}"`);
-      return remove;
-    },
-
-    approvals: {
-      provide: (provider) => {
-        if (!declared.includes("operations:approve")) {
-          throw capabilityRefused(pluginId, "operations:approve");
-        }
-        const remove = provideApprovalPolicy(pluginId, manifest, provider);
-        bag.add(remove, "approval rules");
-        return remove;
-      },
-    },
-  };
-}
@@ -68,7 +68,6 @@ import { createPluginAuth, createPluginSsh } from "./ctx-ssh-auth.js";
 import { createPluginHosts } from "./ctx-hosts.js";
 import { createPluginSchedule } from "./schedule.js";
 import { createPluginFetch, createPluginNotify } from "./ctx-notify.js";
-import { createPluginOperations } from "./ctx-operations.js";
 import { createPluginProcess } from "./ctx-process.js";
 import { createPluginSystem } from "./ctx-system.js";
 import { createPluginPlugins } from "./ctx-plugins.js";
@@ -977,8 +976,6 @@ export function createPluginContext(
      void reportRuntimeError(pluginId, error);
    }),
    ssh: createPluginSsh({ manifest, bag: handle.bag, audit: auditCall }),
-    operations: createPluginOperations({ manifest, bag: handle.bag }),
-
    notify: createPluginNotify({
      manifest,
      audit: auditCall,
@@ -38,20 +38,6 @@ export function isUserPluginFile(
  );
 }

-/** Whether a failed import from a plugin should try core's copy. */
-export function shouldUseHostModule(
-  error: unknown,
-  specifier: string,
-  parentURL: string | undefined,
-  pluginsDir: string,
-): boolean {
-  const code = (error as { code?: string })?.code;
-  // import() says ERR_MODULE_NOT_FOUND, a CommonJS require MODULE_NOT_FOUND.
-  if (code !== "ERR_MODULE_NOT_FOUND" && code !== "MODULE_NOT_FOUND")
-    return false;
-  return isBareSpecifier(specifier) && isUserPluginFile(parentURL, pluginsDir);
-}
-
 export function installHostModuleFallback(): void {
  if (installed) return;
  installed = true;
@@ -63,12 +49,9 @@ export function installHostModuleFallback(): void {
        return nextResolve(specifier, context);
      } catch (error) {
        if (
-          !shouldUseHostModule(
-            error,
-            specifier,
-            context.parentURL,
-            getPluginsDir(),
-          )
+          (error as { code?: string })?.code !== "ERR_MODULE_NOT_FOUND" ||
+          !isBareSpecifier(specifier) ||
+          !isUserPluginFile(context.parentURL, getPluginsDir())
        ) {
          throw error;
        }
@@ -354,21 +354,15 @@ export function createPluginRouter({
  // After auth, so the actor is the user core authenticated rather than
  // whatever the request claimed.
  outer.use((req: Request, _res: Response, next: NextFunction) => {
-    const { userId, sessionId, apiKeyId, apiKeyScopes } = req as Request & {
+    const { userId, sessionId } = req as Request & {
      userId?: string;
      sessionId?: string;
-      apiKeyId?: string;
-      apiKeyScopes?: string[] | null;
    };
    if (!userId) {
      next();
      return;
    }
-    runAsActor(userId, "request", () => next(), sessionId, {
-      origin: { kind: apiKeyId ? "api" : "ui" },
-      apiKeyId,
-      apiKeyScopes,
-    });
+    runAsActor(userId, "request", () => next(), sessionId);
  });

  outer.use(inner);
@@ -73,7 +73,7 @@ import {
  pluginFeatures,
  type PluginManifest,
 } from "./manifest.js";
-import { requireSignedPlugins, verifyAnyTrusted } from "./trust.js";
+import { requireSignedPlugins } from "./trust.js";
 import {
  parseChangelog,
  parseReleaseNotes,
@@ -1048,15 +1048,7 @@ export function restoreMissingPlugins(): Promise<LoadedPlugin[]> {
      await readUninstalled(),
    );
    const restored: LoadedPlugin[] = [];
-    // Shown on the Plugins tab, so a plugin that could not be fetched is not
-    // listed as working. It stays on and is tried again on the next start.
-    const markMissing = (id: string, message: string) =>
-      recordState(
-        id,
-        "failed",
-        `Not in this image and could not be downloaded: ${message}`,
-      ).catch(() => {});
-    for (const [index, id] of ids.entries()) {
+    for (const id of ids) {
      try {
        const record = await repository.findById(id);
        const { source, release } = await requireRelease(
@@ -1083,14 +1075,11 @@ export function restoreMissingPlugins(): Promise<LoadedPlugin[]> {
        pluginLogger.warn(`Could not restore ${id}: ${message}`, {
          operation: "plugin_restore_missing",
        });
-        await markMissing(id, message);
        // The registry is down or offline, so the rest would fail the same way.
        if (
          error instanceof PluginManageError &&
          error.code === "REGISTRY_UNREACHABLE"
        ) {
-          for (const rest of ids.slice(index + 1))
-            await markMissing(rest, message);
          break;
        }
      }
@@ -1525,8 +1514,6 @@ interface StagedUpload {
  file: string;
  manifest: PluginManifest;
  expiresAt: number;
-  /** Set when the upload came with a .sig an official key made. */
-  official: boolean;
 }

 const uploads = new Map<string, StagedUpload>();
@@ -1550,29 +1537,6 @@ export interface UploadPreview {
  capabilities: string[];
  /** The version of an earlier upload this one replaces. */
  replaces: string | null;
-  /** The .sig sent with it was made by the official Termix key. */
-  official: boolean;
-}
-
-/**
- * Checks a .sig sent with an upload. An official signature makes the file
- * the same as a registry download, so it may stand in for one that could not
- * be fetched (an offline install). Anything else is refused.
- */
-function checkUploadSignature(
-  buffer: Buffer,
-  signature: string,
-): { official: boolean } {
-  const sha256 = crypto.createHash("sha256").update(buffer).digest("hex");
-  const result = verifyAnyTrusted(buffer, sha256, signature);
-  if (result.ok === false) {
-    throw new PluginManageError(
-      `The signature does not match this file: ${result.reason}`,
-      400,
-      "INVALID_SIGNATURE",
-    );
-  }
-  return { official: result.tier === "official" };
 }

 async function assertUploadsAllowed(): Promise<void> {
@@ -1629,17 +1593,9 @@ function validateUpload(buffer: Buffer): PluginManifest {
  return manifest;
 }

-/**
- * Only another upload of the same id can be replaced from a file. An
- * officially signed file may also fill in a plugin whose code is missing, like
- * one that was on but could not be downloaded.
- */
-async function assertReplaceable(
-  pluginId: string,
-  official = false,
-): Promise<string | null> {
+/** Only another upload of the same id can be replaced from a file. */
+async function assertReplaceable(pluginId: string): Promise<string | null> {
  const { loader } = getPluginRuntime();
-  if (official && !loader.get(pluginId)) return null;
  if (loader.bundledIds().has(pluginId)) {
    throw new PluginManageError(
      `${pluginId} ships with Termix and can only be replaced by a signed release`,
@@ -1664,30 +1620,21 @@ async function assertReplaceable(
 * Checks an uploaded .tmxplug and holds it until the admin agrees to what
 * it asks for. Nothing is loaded yet.
 */
-export async function stageUpload(
-  buffer: Buffer,
-  signature: string | null = null,
-): Promise<UploadPreview> {
+export async function stageUpload(buffer: Buffer): Promise<UploadPreview> {
  await assertUploadsAllowed();
  await clearUploads(Date.now());
  const manifest = validateUpload(buffer);
-  const { official } = signature
-    ? checkUploadSignature(buffer, signature)
-    : { official: false };
-  const replaces = await assertReplaceable(manifest.id, official);
+  const replaces = await assertReplaceable(manifest.id);

  const token = crypto.randomBytes(16).toString("hex");
  const dir = getDownloadsDir();
  await fs.promises.mkdir(dir, { recursive: true });
  const file = path.join(dir, `upload-${token}.tmxplug`);
  await fs.promises.writeFile(file, buffer);
-  // Next to the file, where the loader looks for it.
-  if (signature) await fs.promises.writeFile(`${file}.sig`, signature);
  uploads.set(token, {
    file,
    manifest,
    expiresAt: Date.now() + UPLOAD_TTL_MS,
-    official,
  });

  return {
@@ -1700,7 +1647,6 @@ export async function stageUpload(
    features: pluginFeatures(manifest.features),
    capabilities: [...manifest.capabilities],
    replaces,
-    official,
  };
 }

@@ -1730,7 +1676,7 @@ export function installUpload(
      );
    }
    assertConsent(options.capabilities, manifest.capabilities);
-    await assertReplaceable(pluginId, upload.official);
+    await assertReplaceable(pluginId);

    const { createCurrentPluginRepository } = await repos();
    const repository = createCurrentPluginRepository();
@@ -1743,7 +1689,6 @@ export function installUpload(
      plugin = await swapIn(pluginId, { upload: upload.file });
    } catch (error) {
      await fs.promises.rm(upload.file, { force: true });
-      await fs.promises.rm(`${upload.file}.sig`, { force: true });
      const { loader } = getPluginRuntime();
      if (before && wasEnabled && loader.get(pluginId)) {
        await startAndRecord(pluginId);
@@ -1756,7 +1701,7 @@ export function installUpload(
    }

    await repository.update(pluginId, {
-      tier: upload.official ? "official" : UNVERIFIED_TIER,
+      tier: UNVERIFIED_TIER,
      registryId: null,
      pinnedVersion: null,
      autoUpdate: false,
@@ -1780,7 +1725,7 @@ export function installUpload(
    }
    const state = await startAndRecord(pluginId);
    pluginLogger.warn(
-      `Installed ${upload.official ? "officially signed" : "unverified"} plugin ${pluginId}@${manifest.version} from a file`,
+      `Installed unverified plugin ${pluginId}@${manifest.version} from a file`,
      { operation: "plugin_install" },
    );
    return { id: pluginId, version: manifest.version, state };
@@ -5,7 +5,7 @@

 import { pluginLogger } from "../utils/logger.js";
 import { getPluginRuntime } from "./index.js";
-import { isDefaultLookPlugin, onboardingDefaults } from "./bundled-index.js";
+import { onboardingDefaults } from "./bundled-index.js";
 import {
  isLinkedDesktop,
  serialized,
@@ -99,11 +99,6 @@ export async function offerPluginSetup(fresh: boolean): Promise<void> {
  await settings.set(PLUGIN_SETUP_OFFERED_KEY, "1");
 }

-// The shipped default look always stays on, so the picker never offers it.
-function inPicker(plugin: { id: string; source: string }): boolean {
-  return !(plugin.source === "bundled" && isDefaultLookPlugin(plugin.id));
-}
-
 function choicePlugins(): ChoicePlugin[] {
  return getPluginRuntime()
    .loader.list()
@@ -123,7 +118,6 @@ export async function describeOnboardingPlugins(): Promise<OnboardingPluginList>
  );
  const plugins = getPluginRuntime()
    .loader.list()
-    .filter(inPicker)
    .map((plugin): OnboardingPluginInfo => {
      const defaults =
        plugin.source === "bundled"
@@ -164,12 +158,7 @@ export function applyOnboardingChoices(
 ): Promise<OnboardingApplyResult> {
  return serialized(async () => {
    const plugins = choicePlugins();
-    const installed = new Set(
-      getPluginRuntime()
-        .loader.list()
-        .filter(inPicker)
-        .map((plugin) => plugin.id),
-    );
+    const installed = new Set(plugins.map((plugin) => plugin.id));
    const wanted: Record<string, PluginChoice> = {};
    for (const [id, choice] of Object.entries(choices)) {
      if (installed.has(id)) wanted[id] = choice;
@@ -16,7 +16,7 @@ import type {
  SyncRow,
 } from "@termix-ssh/plugin-sdk/backend";

-/** Extras core sets for its own entities. A plugin may set the first four. */
+/** Core-only extras a plugin registration cannot set. */
 export interface CoreSyncEntityOptions {
  /** Server-to-desktop only. A desktop never pushes it. */
  readOnly?: boolean;
@@ -58,54 +58,6 @@ export interface RegisteredSyncEntity
  encryptedFields: readonly string[];
 }

-/** What a plugin registration may carry. Anything else is dropped. */
-const PLUGIN_KEYS = [
-  "type",
-  "table",
-  "userColumn",
-  "encryptedFields",
-  "references",
-  "order",
-  "readOnlyFields",
-  "singleton",
-  "answersTo",
-  "shouldSync",
-  "permissions",
-  "serialize",
-  "deserialize",
-  "afterWrite",
-  "remove",
-  "readOnly",
-  "load",
-  "write",
-  "erase",
-] as const;
-
-function pluginEntity(entity: SyncEntityRegistration): SyncEntityRegistration {
-  const picked: Record<string, unknown> = {};
-  for (const key of PLUGIN_KEYS) {
-    if (entity[key] !== undefined) picked[key] = entity[key];
-  }
-  const out = picked as unknown as SyncEntityRegistration;
-  if (out.load || out.write || out.erase) {
-    if (!out.load || !out.write || !out.erase) {
-      throw new Error(
-        `Sync entity "${entity.type}" needs load, write and erase together`,
-      );
-    }
-    // A plugin only ever syncs its own rows both ways; rows it builds for
-    // a user come down as read only copies.
-    if (out.readOnly !== true) {
-      throw new Error(
-        `Sync entity "${entity.type}" with load must be readOnly`,
-      );
-    }
-  } else if (!out.table) {
-    throw new Error(`Sync entity "${entity.type}" needs a table or load`);
-  }
-  return out;
-}
-
 const entities = new Map<string, RegisteredSyncEntity>();
 const listeners = new Set<() => void>();

@@ -129,7 +81,7 @@ export function registerEntity(
  }

  const registered: RegisteredSyncEntity = {
-    ...(owner === CORE_OWNER ? entity : pluginEntity(entity)),
+    ...entity,
    ...(owner === CORE_OWNER ? core : {}),
    owner,
    order: entity.order ?? 100,
@@ -243,9 +243,6 @@ async function provisionLocalDesktopUserIfNeeded(): Promise<void> {
    // Last, so a plugin's activate() sees a fully wired server. A plugin that
    // fails to load must not stop the backend, so this never rejects.
    try {
-      const { startOperationsMaintenance } =
-        await import("./operations/maintenance.js");
-      await startOperationsMaintenance();
      const { initializePlugins } = await import("./plugins/index.js");
      const loaded = await initializePlugins({ freshInstall });
      if (loaded.length > 0) {
@@ -38,7 +38,6 @@ import { hosts, sshCredentials } from "../database/db/schema.js";
 import {
  createResolvers,
  deleteStoredRow,
-  findStoredIds,
  listStoredRows,
  loadWireRow,
  loadWireRows,
@@ -272,11 +271,6 @@ export function createSyncHost(): PluginSyncHost {
      ensureCore: () => ensureCoreEntities(),
      onChanged: (listener) => onEntitiesChanged(listener),
      onLocalWrite: (listener) => onLocalWrite(listener),
-      idsOf: async (type, userId, syncIds) => {
-        const entity = getEntity(type);
-        if (!entity || entity.load) return {};
-        return findStoredIds(entity, userId, syncIds);
-      },
    },

    replica: {
@@ -161,7 +161,7 @@ async function reconcileListeners(): Promise<void> {
  }
 }

-export function notifyListeners(userId: string): void {
+function notifyListeners(userId: string): void {
  const set = listeners.get(userId);
  if (!set) return;
  for (const res of set) {
@@ -25,7 +25,7 @@ import {
 } from "../store.js";
 import { allocateSeq, getRecord, putRecord, recordKey } from "../records.js";
 import { orderSelfReferences } from "../wire.js";
-import { markChanged, notifyListeners, reconcileUser } from "./feed.js";
+import { reconcileUser } from "./feed.js";

 export interface PushOp {
  entityType: string;
@@ -278,12 +278,6 @@ export async function applyPush(

  // Refresh the snapshot so the next pull serves what was just written.
  await reconcileUser(userId, { force: true });
-  // The reconcile finds nothing new, since the push wrote the records itself,
-  // so tell this user's other clients, and other users who may share a row.
-  if ([...results.values()].some((result) => result.status === "ok")) {
-    notifyListeners(userId);
-    markChanged();
-  }
  return ops.map(
    (op) =>
      results.get(recordKey(op.entityType, op.syncId)) ?? {
@@ -112,21 +112,6 @@ export async function findStoredRow(
  return row ?? null;
 }

-/** The local ids of the user's own rows, by sync id. Unknown ones are left out. */
-export async function findStoredIds(
-  entity: RegisteredSyncEntity,
-  userId: string,
-  syncIds: string[],
-): Promise<Record<string, number>> {
-  const ids: Record<string, number> = {};
-  if (entity.singleton || !entity.table) return ids;
-  for (const syncId of new Set(syncIds)) {
-    const row = await findStoredRow(entity, userId, syncId);
-    if (row && typeof row.id === "number") ids[syncId] = row.id;
-  }
-  return ids;
-}
-
 /** Gives an old row with no syncId one, so it can take part. */
 async function ensureSyncId(
  entity: RegisteredSyncEntity,
@@ -1,98 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { sql } from "drizzle-orm";
-import {
-  folderAndParents,
-  SharedFolderAuthOverrideRepository,
-} from "../../../database/repositories/shared-folder-auth-override-repository.js";
-import { TestSqliteDatabase } from "./test-support.js";
-
-describe("folderAndParents", () => {
-  it("lists the folder, then each folder above it", () => {
-    expect(folderAndParents("Prod / Web / EU")).toEqual([
-      "Prod / Web / EU",
-      "Prod / Web",
-      "Prod",
-    ]);
-    expect(folderAndParents(" Prod ")).toEqual(["Prod"]);
-    expect(folderAndParents("")).toEqual([]);
-    expect(folderAndParents(null)).toEqual([]);
-  });
-});
-
-describe("SharedFolderAuthOverrideRepository", () => {
-  let adapter: TestSqliteDatabase | null = null;
-
-  afterEach(async () => {
-    await adapter?.close();
-    adapter = null;
-  });
-
-  async function createRepository(onWrite?: () => void) {
-    adapter = new TestSqliteDatabase();
-    const context = await adapter.connect();
-    await adapter.exec(`
-      INSERT INTO users (id, username, password_hash)
-      VALUES ('recipient', 'recipient', 'hash'), ('other', 'other', 'hash');
-      INSERT INTO ssh_credentials (id, user_id, name, auth_type)
-      VALUES (7, 'recipient', 'cred-seven', 'password'),
-        (8, 'recipient', 'cred-eight', 'password');
-    `);
-    return new SharedFolderAuthOverrideRepository(context, onWrite);
-  }
-
-  it("sets, updates and clears a login per user, folder and protocol", async () => {
-    let writes = 0;
-    const repository = await createRepository(() => {
-      writes += 1;
-    });
-
-    await repository.setCredential("recipient", "Prod", "ssh", 7);
-    await repository.setCredential("recipient", "Prod", "ssh", 8);
-    await repository.setCredential("recipient", "Prod", "rdp", 7);
-    await expect(
-      repository.findCredentialId("recipient", "Prod", "ssh"),
-    ).resolves.toBe(8);
-    await expect(
-      repository.findCredentialId("other", "Prod", "ssh"),
-    ).resolves.toBeNull();
-
-    await expect(
-      repository.clearCredential("recipient", "Prod", "ssh"),
-    ).resolves.toBe(true);
-    await expect(
-      repository.clearCredential("recipient", "Prod", "ssh"),
-    ).resolves.toBe(false);
-    expect(writes).toBe(4);
-  });
-
-  it("finds the login of the closest folder above a host", async () => {
-    const repository = await createRepository();
-    await repository.setCredential("recipient", "Prod", "ssh", 7);
-    await repository.setCredential("recipient", "Prod / Web", "ssh", 8);
-
-    await expect(
-      repository.findClosest("recipient", "Prod / Web / EU", "ssh"),
-    ).resolves.toEqual({ folder: "Prod / Web", credentialId: 8 });
-    await expect(
-      repository.findClosest("recipient", "Prod / DB", "ssh"),
-    ).resolves.toEqual({ folder: "Prod", credentialId: 7 });
-    await expect(
-      repository.findClosest("recipient", "Staging", "ssh"),
-    ).resolves.toBeNull();
-    await expect(
-      repository.findClosest("recipient", "Prod", "rdp"),
-    ).resolves.toBeNull();
-    await expect(
-      repository.findClosest("recipient", null, "ssh"),
-    ).resolves.toBeNull();
-  });
-
-  it("drops the login when its credential is deleted", async () => {
-    const repository = await createRepository();
-    await repository.setCredential("recipient", "Prod", "ssh", 7);
-    await adapter!.run(sql`DELETE FROM ssh_credentials WHERE id = 7`);
-    await expect(
-      repository.findCredentialId("recipient", "Prod", "ssh"),
-    ).resolves.toBeNull();
-  });
-});
@@ -1,277 +0,0 @@
-import express from "express";
-import request from "supertest";
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const state = vi.hoisted(() => ({
-  userId: "user-1",
-  apiKeyId: undefined as string | undefined,
-  apiKeyScopes: undefined as string[] | null | undefined,
-  actingAdminUserId: undefined as string | undefined,
-  viewAll: false,
-  hostAccess: false,
-  runs: new Map<string, Record<string, unknown>>(),
-  runOperation: vi.fn(),
-  decide: vi.fn(),
-  cancel: vi.fn(async () => true),
-}));
-
-vi.mock("../../../utils/logger.js", () => ({
-  databaseLogger: { error: vi.fn(), warn: vi.fn(), info: vi.fn() },
-  pluginLogger: { warn: vi.fn(), info: vi.fn(), error: vi.fn() },
-}));
-vi.mock("../../../utils/auth-manager.js", () => ({
-  AuthManager: {
-    getInstance: () => ({
-      createAuthMiddleware:
-        () =>
-        (
-          req: Record<string, unknown>,
-          _res: unknown,
-          next: () => void,
-        ): void => {
-          req.userId = state.userId;
-          req.apiKeyId = state.apiKeyId;
-          req.apiKeyScopes = state.apiKeyScopes;
-          req.actingAdminUserId = state.actingAdminUserId;
-          next();
-        },
-    }),
-  },
-}));
-vi.mock("../../../utils/permission-manager.js", () => ({
-  PermissionManager: {
-    getInstance: () => ({
-      hasPermission: async () => state.viewAll,
-      canAccessHost: async () => ({ hasAccess: state.hostAccess }),
-    }),
-  },
-}));
-vi.mock("../../../database/repositories/factory.js", () => ({
-  createCurrentOperationRepository: () => ({
-    findRun: async (id: string) => state.runs.get(id) ?? null,
-    listRuns: async (filters: { userId?: string }) =>
-      [...state.runs.values()].filter(
-        (run) => !filters.userId || run.userId === filters.userId,
-      ),
-    listPendingApprovals: async () => [],
-    listEvents: async () => [],
-  }),
-}));
-vi.mock("../../../operations/catalog.js", () => ({
-  buildCatalog: vi.fn(async () => ({
-    actions: [{ id: "demo.restart" }],
-    events: [],
-    resources: [],
-    signals: [],
-  })),
-}));
-vi.mock("../../../operations/resources.js", () => ({
-  flattenResourceRows: vi.fn(),
-  readAcrossHosts: vi.fn(async () => []),
-}));
-vi.mock("../../../operations/gate.js", () => {
-  class OperationError extends Error {
-    status: number;
-    constructor(
-      readonly code: string,
-      message: string,
-      status = 403,
-    ) {
-      super(message);
-      this.status = status;
-    }
-  }
-  return {
-    OperationError,
-    runOperation: state.runOperation,
-    decideOperationApproval: state.decide,
-    cancelOperationRun: state.cancel,
-  };
-});
-
-const { default: router } =
-  await import("../../../database/routes/operations-routes.js");
-const { OperationError } = await import("../../../operations/gate.js");
-
-const app = express();
-app.use(express.json());
-app.use("/operations", router);
-
-const run = (overrides: Record<string, unknown> = {}) => ({
-  id: "run-1",
-  actionId: "demo.restart",
-  pluginId: "demo",
-  pluginVersion: "1.0.0",
-  userId: "user-1",
-  username: "name",
-  origin: '{"kind":"ui"}',
-  hostId: 1,
-  hostName: "web",
-  batchId: null,
-  dryRun: false,
-  risk: "change",
-  status: "success",
-  summary: "done",
-  changed: true,
-  input: '{"token":"[redacted]"}',
-  sealedInput: "sealed:secret",
-  output: null,
-  undoInput: null,
-  error: null,
-  errorCode: null,
-  undoOf: null,
-  createdAt: "2026-01-01",
-  startedAt: null,
-  finishedAt: null,
-  ...overrides,
-});
-
-beforeEach(() => {
-  state.userId = "user-1";
-  state.apiKeyId = undefined;
-  state.apiKeyScopes = undefined;
-  state.actingAdminUserId = undefined;
-  state.viewAll = false;
-  state.hostAccess = false;
-  state.runs.clear();
-  state.runOperation.mockReset();
-  state.runOperation.mockResolvedValue({ runId: "r", status: "success" });
-  state.decide.mockReset();
-  state.decide.mockResolvedValue({ runId: "r", status: "success" });
-});
-
-describe("POST /operations/:id/run", () => {
-  it("passes a session as a ui origin", async () => {
-    await request(app)
-      .post("/operations/demo.restart/run")
-      .send({ hostId: 1, input: { name: "x" } })
-      .expect(200);
-    expect(state.runOperation).toHaveBeenCalledWith(
-      expect.objectContaining({
-        actionId: "demo.restart",
-        hostId: 1,
-        userId: "user-1",
-        origin: { kind: "ui" },
-      }),
-    );
-  });
-
-  it("passes a key as an api origin with its scopes", async () => {
-    state.apiKeyId = "key";
-    state.apiKeyScopes = ["operations:read"];
-    await request(app)
-      .post("/operations/demo.restart/run")
-      .send({})
-      .expect(200);
-    expect(state.runOperation).toHaveBeenCalledWith(
-      expect.objectContaining({
-        origin: { kind: "api" },
-        apiKeyScopes: ["operations:read"],
-      }),
-    );
-  });
-
-  it("does not take the user or origin from the body", async () => {
-    await request(app)
-      .post("/operations/demo.restart/run")
-      .send({ userId: "admin", origin: { kind: "plugin", via: "automation" } })
-      .expect(200);
-    expect(state.runOperation).toHaveBeenCalledWith(
-      expect.objectContaining({ userId: "user-1", origin: { kind: "ui" } }),
-    );
-  });
-
-  it("sends a refusal's status and code", async () => {
-    state.runOperation.mockRejectedValue(
-      new (
-        OperationError as never as new (code: string, message: string) => Error
-      )("FORBIDDEN", "No"),
-    );
-    const response = await request(app)
-      .post("/operations/demo.restart/run")
-      .send({})
-      .expect(403);
-    expect(response.body).toMatchObject({ code: "FORBIDDEN", error: "No" });
-  });
-});
-
-describe("runs", () => {
-  it("never returns the sealed input", async () => {
-    state.runs.set("run-1", run());
-    const response = await request(app)
-      .get("/operations/runs/run-1")
-      .expect(200);
-    expect(JSON.stringify(response.body)).not.toContain("secret");
-  });
-
-  it("hides another user's run", async () => {
-    state.runs.set("run-1", run({ userId: "someone" }));
-    await request(app).get("/operations/runs/run-1").expect(404);
-  });
-
-  it("shows a run to someone who manages its host", async () => {
-    state.runs.set("run-1", run({ userId: "someone" }));
-    state.hostAccess = true;
-    await request(app).get("/operations/runs/run-1").expect(200);
-  });
-
-  it("lists only a user's own runs", async () => {
-    state.runs.set("a", run({ id: "a" }));
-    state.runs.set("b", run({ id: "b", userId: "someone" }));
-    const response = await request(app).get("/operations/runs").expect(200);
-    expect(response.body.runs.map((row: { id: string }) => row.id)).toEqual([
-      "a",
-    ]);
-  });
-
-  it("lists everything with the view permission", async () => {
-    state.viewAll = true;
-    state.runs.set("a", run({ id: "a" }));
-    state.runs.set("b", run({ id: "b", userId: "someone" }));
-    const response = await request(app).get("/operations/runs").expect(200);
-    expect(response.body.runs).toHaveLength(2);
-  });
-
-  it("does not cancel another user's run", async () => {
-    state.runs.set("run-1", run({ userId: "someone" }));
-    await request(app).post("/operations/runs/run-1/cancel").expect(404);
-    expect(state.cancel).not.toHaveBeenCalled();
-  });
-});
-
-describe("POST /operations/approvals/:id", () => {
-  it("needs a clear answer", async () => {
-    await request(app)
-      .post("/operations/approvals/a")
-      .send({ approve: "yes" })
-      .expect(400);
-    expect(state.decide).not.toHaveBeenCalled();
-  });
-
-  it("refuses a scoped key", async () => {
-    state.apiKeyScopes = ["operations:run"];
-    await request(app)
-      .post("/operations/approvals/a")
-      .send({ approve: true })
-      .expect(403);
-    expect(state.decide).not.toHaveBeenCalled();
-  });
-
-  it("marks an impersonated request", async () => {
-    state.actingAdminUserId = "admin";
-    await request(app)
-      .post("/operations/approvals/a")
-      .send({ approve: true })
-      .expect(200);
-    expect(state.decide).toHaveBeenCalledWith(
-      expect.objectContaining({ impersonated: true }),
-    );
-  });
-});
-
-describe("GET /operations/catalog", () => {
-  it("answers", async () => {
-    const response = await request(app).get("/operations/catalog").expect(200);
-    expect(response.body.actions).toEqual([{ id: "demo.restart" }]);
-  });
-});
@@ -8,14 +8,9 @@ const state = vi.hoisted(() => ({
    isShared: true,
    isAdminBypass: false,
  },
-  credentialUsable: true,
+  credentialOwned: true,
  credentialId: 7 as number | null,
  writes: [] as Array<{ protocol: string; credentialId: number | null }>,
-  folderWrites: [] as Array<{
-    folder: string;
-    protocol: string;
-    credentialId: number | null;
-  }>,
  auditCalls: [] as Array<Record<string, unknown>>,
 }));

@@ -75,12 +70,11 @@ vi.mock("../../../utils/permission-manager.js", () => ({
  },
 }));

-vi.mock("../../../hosts/usable-credential.js", () => ({
-  findUsableCredential: async (credentialId: number) =>
-    state.credentialUsable ? { id: credentialId } : null,
-}));
-
 vi.mock("../../../database/repositories/factory.js", () => ({
+  createCurrentCredentialRepository: () => ({
+    findByIdForUser: async () =>
+      state.credentialOwned ? { id: state.credentialId } : null,
+  }),
  createCurrentSharedHostAuthOverrideRepository: () => ({
    findCredentialId: async () => state.credentialId,
    setCredential: async (
@@ -102,25 +96,6 @@ vi.mock("../../../database/repositories/factory.js", () => ({
      return true;
    },
  }),
-  createCurrentSharedFolderAuthOverrideRepository: () => ({
-    findCredentialId: async () => 7,
-    setCredential: async (
-      _userId: string,
-      folder: string,
-      protocol: string,
-      credentialId: number,
-    ) => {
-      state.folderWrites.push({ folder, protocol, credentialId });
-    },
-    clearCredential: async (
-      _userId: string,
-      folder: string,
-      protocol: string,
-    ) => {
-      state.folderWrites.push({ folder, protocol, credentialId: null });
-      return true;
-    },
-  }),
  createCurrentUserRepository: () => ({
    findById: async () => ({ id: "recipient", username: "recipient" }),
  }),
@@ -133,7 +108,6 @@ vi.mock("../../../database/repositories/factory.js", () => ({

 vi.mock("../../../utils/audit-logger.js", () => ({
  getRequestMeta: () => ({ ipAddress: "", userAgent: "" }),
-  getAuditUsername: async (userId: string) => userId,
  logAudit: vi.fn(async (entry: Record<string, unknown>) => {
    state.auditCalls.push(entry);
  }),
@@ -159,8 +133,6 @@ describe("shared host authentication override routes", () => {
    method: "get" | "put",
    body: Record<string, unknown> = {},
    protocol = "ssh",
-    path = "/host-access/:hostId/auth/:protocol",
-    query: Record<string, unknown> = {},
  ): Promise<{ status: number; body: unknown }> {
    const routeLayer = (
      router as unknown as {
@@ -179,14 +151,15 @@ describe("shared host authentication override routes", () => {
        }>;
      }
    ).stack.find(
-      (layer) => layer.route?.path === path && layer.route.methods[method],
+      (layer) =>
+        layer.route?.path === "/host-access/:hostId/auth/:protocol" &&
+        layer.route.methods[method],
    );
    if (!routeLayer?.route) throw new Error(`Missing ${method} route`);

    const handlers = routeLayer.route.stack.map((layer) => layer.handle);
    const req = {
      params: { hostId: "42", protocol },
-      query,
      body,
      headers: {},
      ip: "127.0.0.1",
@@ -233,106 +206,12 @@ describe("shared host authentication override routes", () => {
      isShared: true,
      isAdminBypass: false,
    };
-    state.credentialUsable = true;
+    state.credentialOwned = true;
    state.credentialId = 7;
    state.writes = [];
-    state.folderWrites = [];
    state.auditCalls = [];
  });

-  describe("folder logins", () => {
-    const FOLDER = "/folder-auth/:protocol";
-
-    it("reads the login for a folder", async () => {
-      const response = await invoke("get", {}, "ssh", FOLDER, {
-        folder: " Prod /  Web ",
-      });
-      expect(response).toEqual({
-        status: 200,
-        body: { folder: "Prod / Web", protocol: "ssh", credentialId: 7 },
-      });
-    });
-
-    it("sets and clears the login and audits both", async () => {
-      expect(
-        (
-          await invoke(
-            "put",
-            { folder: "Prod", credentialId: 8 },
-            "ssh",
-            FOLDER,
-          )
-        ).status,
-      ).toBe(200);
-      expect(
-        (
-          await invoke(
-            "put",
-            { folder: "Prod", credentialId: null },
-            "ssh",
-            FOLDER,
-          )
-        ).status,
-      ).toBe(200);
-      expect(state.folderWrites).toEqual([
-        { folder: "Prod", protocol: "ssh", credentialId: 8 },
-        { folder: "Prod", protocol: "ssh", credentialId: null },
-      ]);
-      expect(state.auditCalls.map((call) => call.action)).toEqual([
-        "set_shared_folder_auth_override",
-        "clear_shared_folder_auth_override",
-      ]);
-    });
-
-    it("rejects a bad folder, protocol or credential", async () => {
-      expect(
-        (await invoke("get", {}, "ssh", FOLDER, { folder: "" })).status,
-      ).toBe(400);
-      expect(
-        (
-          await invoke(
-            "put",
-            { folder: "x".repeat(300), credentialId: 8 },
-            "ssh",
-            FOLDER,
-          )
-        ).status,
-      ).toBe(400);
-      expect(
-        (
-          await invoke(
-            "put",
-            { folder: "Prod", credentialId: 8 },
-            "smtp",
-            FOLDER,
-          )
-        ).status,
-      ).toBe(400);
-      expect(
-        (
-          await invoke(
-            "put",
-            { folder: "Prod", credentialId: -1 },
-            "ssh",
-            FOLDER,
-          )
-        ).status,
-      ).toBe(400);
-      state.credentialUsable = false;
-      expect(
-        (
-          await invoke(
-            "put",
-            { folder: "Prod", credentialId: 99 },
-            "ssh",
-            FOLDER,
-          )
-        ).status,
-      ).toBe(404);
-      expect(state.folderWrites).toEqual([]);
-    });
-  });
-
  it("returns the current override for a role-derived shared recipient", async () => {
    const response = await invoke("get");
    expect(response).toEqual({
@@ -375,7 +254,7 @@ describe("shared host authentication override routes", () => {
    const invalidResponse = await invoke("put", { credentialId: 0 });
    expect(invalidResponse.status).toBe(400);

-    state.credentialUsable = false;
+    state.credentialOwned = false;
    const foreignResponse = await invoke("put", { credentialId: 99 });
    expect(foreignResponse.status).toBe(404);

@@ -69,7 +69,7 @@ vi.mock("../../../database/repositories/factory.js", () => ({
  }),
 }));

-const { pruneHostGrants, pruneCredentialGrants, grantsForFolderRule } =
+const { pruneHostGrants, pruneCredentialGrants } =
  await import("../../../database/routes/rbac.js");

 const chain = (): Grant[] => [
@@ -105,27 +105,3 @@ describe("share pruning", () => {
    expect(state.credentialGrants.map((g) => g.userId)).toEqual(["dave"]);
  });
 });
-
-describe("grantsForFolderRule", () => {
-  const entries = [
-    { id: 1, userId: "bob", roleId: null },
-    { id: 2, userId: null, roleId: 7 },
-    { id: 3, userId: "carol", roleId: null },
-  ];
-
-  it("picks the grants of the rule's user or role", () => {
-    expect(
-      grantsForFolderRule(entries, { userId: "bob", roleId: null }).map(
-        (e) => e.id,
-      ),
-    ).toEqual([1]);
-    expect(
-      grantsForFolderRule(entries, { userId: null, roleId: 7 }).map(
-        (e) => e.id,
-      ),
-    ).toEqual([2]);
-    expect(
-      grantsForFolderRule(entries, { userId: null, roleId: null }),
-    ).toEqual([]);
-  });
-});
@@ -1,160 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-import type { Request, RequestHandler, Response } from "express";
-
-const state = vi.hoisted(() => ({
-  users: new Map<
-    string,
-    {
-      id: string;
-      username: string;
-      isAdmin: boolean;
-      isExternal: boolean;
-      passwordHash: string;
-    }
-  >(),
-  adminCount: 1,
-  deleted: [] as string[],
-}));
-
-vi.mock("../../../database/db/index.js", () => ({ db: {} }));
-
-vi.mock("../../../utils/logger.js", () => ({
-  authLogger: {
-    error: vi.fn(),
-    warn: vi.fn(),
-    info: vi.fn(),
-    success: vi.fn(),
-  },
-}));
-
-vi.mock("bcryptjs", () => ({
-  default: {
-    compare: async (password: string, hash: string) =>
-      hash === `hash:${password}`,
-  },
-}));
-
-vi.mock("../../../database/repositories/factory.js", () => ({
-  createCurrentUserRepository: () => ({
-    findById: async (id: string) => state.users.get(id) ?? null,
-    countAdmins: async () => state.adminCount,
-  }),
-}));
-
-vi.mock("../../../database/routes/delete-user-data.js", () => ({
-  deleteUserAndRelatedData: async (userId: string) => {
-    state.deleted.push(userId);
-  },
-}));
-
-const { registerUserDeleteAccountRoutes } =
-  await import("../../../database/routes/user-delete-account-routes.js");
-
-let handler: RequestHandler | null = null;
-registerUserDeleteAccountRoutes(
-  {
-    delete: (_path: string, ...handlers: RequestHandler[]) => {
-      handler = handlers[handlers.length - 1];
-    },
-  } as unknown as import("express").Router,
-  (_req, _res, next) => next(),
-);
-
-async function deleteAccount(userId: string, body: Record<string, unknown>) {
-  const req = { userId, body } as unknown as Request;
-  const res = {
-    statusCode: 200,
-    jsonBody: null as Record<string, unknown> | null,
-    status(code: number) {
-      this.statusCode = code;
-      return this;
-    },
-    json(payload: Record<string, unknown>) {
-      this.jsonBody = payload;
-      return this;
-    },
-  };
-  await handler!(req, res as unknown as Response, () => {});
-  return res;
-}
-
-beforeEach(() => {
-  state.adminCount = 1;
-  state.deleted = [];
-  state.users = new Map([
-    [
-      "u1",
-      {
-        id: "u1",
-        username: "user",
-        isAdmin: false,
-        isExternal: false,
-        passwordHash: "hash:secret",
-      },
-    ],
-    [
-      "admin1",
-      {
-        id: "admin1",
-        username: "admin",
-        isAdmin: true,
-        isExternal: false,
-        passwordHash: "hash:secret",
-      },
-    ],
-    [
-      "sso1",
-      {
-        id: "sso1",
-        username: "sso",
-        isAdmin: false,
-        isExternal: true,
-        passwordHash: "hash:secret",
-      },
-    ],
-  ]);
-});
-
-describe("DELETE /delete-account", () => {
-  it("runs the full user cleanup", async () => {
-    const res = await deleteAccount("u1", { password: "secret" });
-    expect(res.statusCode).toBe(200);
-    expect(state.deleted).toEqual(["u1"]);
-  });
-
-  it("needs a password", async () => {
-    const res = await deleteAccount("u1", {});
-    expect(res.statusCode).toBe(400);
-    expect(state.deleted).toEqual([]);
-  });
-
-  it("refuses a wrong password", async () => {
-    const res = await deleteAccount("u1", { password: "nope" });
-    expect(res.statusCode).toBe(401);
-    expect(state.deleted).toEqual([]);
-  });
-
-  it("refuses external accounts", async () => {
-    const res = await deleteAccount("sso1", { password: "secret" });
-    expect(res.statusCode).toBe(403);
-    expect(state.deleted).toEqual([]);
-  });
-
-  it("refuses the last admin", async () => {
-    const res = await deleteAccount("admin1", { password: "secret" });
-    expect(res.statusCode).toBe(403);
-    expect(state.deleted).toEqual([]);
-  });
-
-  it("lets an admin go when another admin is left", async () => {
-    state.adminCount = 2;
-    const res = await deleteAccount("admin1", { password: "secret" });
-    expect(res.statusCode).toBe(200);
-    expect(state.deleted).toEqual(["admin1"]);
-  });
-
-  it("404s for an unknown user", async () => {
-    const res = await deleteAccount("ghost", { password: "secret" });
-    expect(res.statusCode).toBe(404);
-  });
-});
Author	SHA1	Message	Date
LukeGus	0dfe3e22a9	chore: update translations and plugin pins	2026-10-27 15:16:37 +00:00
LukeGus	ea0e614183	feat: host color and icon columns that sync	2026-10-25 11:25:50 -05:00
LukeGus	90f5aebafb	feat: list plugin engine ranges for the mobile app	2026-10-25 00:59:04 -05:00
LukeGus	1be507b13c	chore: note the SDK host build fix in the changelog	2026-10-25 00:53:18 -05:00
LukeGus	76d733143a	fix: build the SDK host modules in production mode	2026-10-25 00:00:39 -05:00
LukeGus	594fc19cbf	feat: frame host for running one plugin view outside the shell	2026-10-24 23:53:55 -05:00
LukeGus	bb448b6753	feat: let plugins say how they show in the mobile app	2026-10-24 22:48:13 -05:00
LukeGus	a4d8a52928	feat: add host-scripts entry to the plugin sdk	2026-10-24 14:30:17 -05:00
LukeGus	3d92725ce6	feat: let the login page send the token back to the mobile app	2026-10-23 15:52:36 -05:00