feat: move termix identity into a plugin (C6)

plugins/termix-identity/src/backend/tables.ts

@@ -0,0 +1,78 @@
+import {
+  adoptLegacyTable,
+  boolean,
+  defineTable,
+  id,
+  integer,
+  refUser,
+  text,
+  varchar,
+} from "@termix/plugin-sdk/db";
+
+/** One public handle per user. Adopted from core's termix_identities. */
+export const identities = adoptLegacyTable(
+  "termix_identities",
+  defineTable("identities", {
+    id: id(),
+    userId: refUser().unique(),
+    handle: varchar().notNull().unique(),
+    description: text(),
+    createdAt: text().notNull().defaultNow(),
+    updatedAt: text().notNull().defaultNow(),
+  }),
+);
+
+/**
+ * Published public keys, plaintext because the resolver serves them without
+ * auth. Adopted from core's termix_identity_keys. The migrations keep the
+ * legacy links to identities (cascade) and ssh_credentials (set null) by hand.
+ */
+export const keys = adoptLegacyTable(
+  "termix_identity_keys",
+  defineTable(
+    "keys",
+    {
+      id: id(),
+      identityId: integer().notNull(),
+      userId: refUser(),
+      publicKey: text().notNull(),
+      keyType: text().notNull(),
+      algorithm: text().notNull(),
+      label: text(),
+      comment: text(),
+      source: text().notNull().default("manual"),
+      credentialId: integer(),
+      enabled: boolean().notNull().default(true),
+      createdAt: text().notNull().defaultNow(),
+    },
+    {
+      indexes: [
+        {
+          name: "idx_termix_identity_keys_identity",
+          columns: ["identityId"],
+        },
+      ],
+    },
+  ),
+);
+
+/**
+ * One certificate authority per identity. The private key is sealed with
+ * ctx.secrets.seal; 2.8 rows are resealed by core's
+ * termix-identity-ca-migration. Adopted from core's termix_identity_ca.
+ */
+export const ca = adoptLegacyTable(
+  "termix_identity_ca",
+  defineTable("ca", {
+    id: id(),
+    identityId: integer().notNull().unique(),
+    userId: refUser(),
+    publicKey: text().notNull(),
+    privateKey: text().notNull(),
+    validityDays: integer().notNull().default(90),
+    createdAt: text().notNull().defaultNow(),
+    updatedAt: text().notNull().defaultNow(),
+  }),
+);
+
+export const tables = [identities, keys, ca];