feat: store rdp, vnc and telnet logins in a generic per-protocol table

drizzle/mysql/0063_needy_radioactive_man.sql

@@ -0,0 +1,26 @@
+-- The RDP, VNC and Telnet logins moved out of ssh_data into host_protocol_auth.
+-- A boot migration copies them after this runs, so the old ssh_data columns
+-- and their foreign keys stay in place, unused, until 3.0.0.
+CREATE TABLE `host_protocol_auth` (
+	`id` int AUTO_INCREMENT NOT NULL,
+	`host_id` int NOT NULL,
+	`user_id` varchar(255) NOT NULL,
+	`protocol` varchar(255) NOT NULL,
+	`auth_type` text NOT NULL DEFAULT ('direct'),
+	`credential_id` int,
+	`username` text,
+	`password` text,
+	`fields` text,
+	`secret_fields` text,
+	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
+	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
+	CONSTRAINT `host_protocol_auth_id` PRIMARY KEY(`id`),
+	CONSTRAINT `idx_host_protocol_auth_host_protocol` UNIQUE(`host_id`,`protocol`)
+);
+--> statement-breakpoint
+ALTER TABLE `shared_host_secrets` ADD `encrypted_fields` text;--> statement-breakpoint
+ALTER TABLE `host_protocol_auth` ADD CONSTRAINT `host_protocol_auth_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE `host_protocol_auth` ADD CONSTRAINT `host_protocol_auth_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE `host_protocol_auth` ADD CONSTRAINT `host_protocol_auth_credential_id_ssh_credentials_id_fk` FOREIGN KEY (`credential_id`) REFERENCES `ssh_credentials`(`id`) ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX `idx_host_protocol_auth_user` ON `host_protocol_auth` (`user_id`);--> statement-breakpoint
+CREATE INDEX `idx_host_protocol_auth_credential` ON `host_protocol_auth` (`credential_id`);

drizzle/mysql/meta/_journal.json

@@ -442,6 +442,13 @@
       "when": 1790651054515,
       "tag": "0062_smooth_speed",
       "breakpoints": true
+    },
+    {
+      "idx": 63,
+      "version": "5",
+      "when": 1790700739900,
+      "tag": "0063_needy_radioactive_man",
+      "breakpoints": true
     }
   ]
 }

drizzle/postgres/0063_giant_starfox.sql

@@ -0,0 +1,25 @@
+-- The RDP, VNC and Telnet logins moved out of ssh_data into host_protocol_auth.
+-- A boot migration copies them after this runs, so the old ssh_data columns
+-- and their foreign keys stay in place, unused, until 3.0.0.
+CREATE TABLE "host_protocol_auth" (
+	"id" serial PRIMARY KEY NOT NULL,
+	"host_id" integer NOT NULL,
+	"user_id" varchar(255) NOT NULL,
+	"protocol" varchar(255) NOT NULL,
+	"auth_type" text DEFAULT 'direct' NOT NULL,
+	"credential_id" integer,
+	"username" text,
+	"password" text,
+	"fields" text,
+	"secret_fields" text,
+	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
+	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "shared_host_secrets" ADD COLUMN "encrypted_fields" text;--> statement-breakpoint
+ALTER TABLE "host_protocol_auth" ADD CONSTRAINT "host_protocol_auth_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "host_protocol_auth" ADD CONSTRAINT "host_protocol_auth_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "host_protocol_auth" ADD CONSTRAINT "host_protocol_auth_credential_id_ssh_credentials_id_fk" FOREIGN KEY ("credential_id") REFERENCES "public"."ssh_credentials"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "idx_host_protocol_auth_host_protocol" ON "host_protocol_auth" USING btree ("host_id","protocol");--> statement-breakpoint
+CREATE INDEX "idx_host_protocol_auth_user" ON "host_protocol_auth" USING btree ("user_id");--> statement-breakpoint
+CREATE INDEX "idx_host_protocol_auth_credential" ON "host_protocol_auth" USING btree ("credential_id");

drizzle/postgres/meta/_journal.json

@@ -442,6 +442,13 @@
       "when": 1790651053871,
       "tag": "0062_curvy_killmonger",
       "breakpoints": true
+    },
+    {
+      "idx": 63,
+      "version": "7",
+      "when": 1790700738799,
+      "tag": "0063_giant_starfox",
+      "breakpoints": true
     }
   ]
 }

drizzle/sqlite/0058_bitter_thunderbolt.sql

@@ -0,0 +1,25 @@
+-- The RDP, VNC and Telnet logins moved out of ssh_data into host_protocol_auth.
+-- A boot migration copies them after this runs, so the old ssh_data columns
+-- are not dropped here; they stay in place, unused, until 3.0.0.
+CREATE TABLE `host_protocol_auth` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`host_id` integer NOT NULL,
+	`user_id` text NOT NULL,
+	`protocol` text NOT NULL,
+	`auth_type` text DEFAULT 'direct' NOT NULL,
+	`credential_id` integer,
+	`username` text,
+	`password` text,
+	`fields` text,
+	`secret_fields` text,
+	`created_at` text DEFAULT CURRENT_TIMESTAMP NOT NULL,
+	`updated_at` text DEFAULT CURRENT_TIMESTAMP NOT NULL,
+	FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON UPDATE no action ON DELETE cascade,
+	FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE cascade,
+	FOREIGN KEY (`credential_id`) REFERENCES `ssh_credentials`(`id`) ON UPDATE no action ON DELETE set null
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `idx_host_protocol_auth_host_protocol` ON `host_protocol_auth` (`host_id`,`protocol`);--> statement-breakpoint
+CREATE INDEX `idx_host_protocol_auth_user` ON `host_protocol_auth` (`user_id`);--> statement-breakpoint
+CREATE INDEX `idx_host_protocol_auth_credential` ON `host_protocol_auth` (`credential_id`);--> statement-breakpoint
+ALTER TABLE `shared_host_secrets` ADD `encrypted_fields` text;

drizzle/sqlite/meta/_journal.json

@@ -407,6 +407,13 @@
       "when": 1790651053202,
       "tag": "0057_green_hydra",
       "breakpoints": true
+    },
+    {
+      "idx": 58,
+      "version": "6",
+      "when": 1790700721290,
+      "tag": "0058_bitter_thunderbolt",
+      "breakpoints": true
     }
   ]
 }