feat: move snippets backend and tables into a plugin (B2)

src/backend/tests/plugins/ctx-db.test.ts

@@ -60,6 +60,8 @@ vi.mock("../../utils/database-save-trigger.js", () => ({
 vi.mock("../../database/db/schema.js", () => ({
   users: { marker: "users" },
   hosts: { marker: "hosts" },
+  roles: { marker: "roles" },
+  userRoles: { marker: "userRoles" },
 }));
 
 import { createPluginContext, createPluginHandle } from "../../plugins/ctx.js";
@@ -195,7 +197,12 @@ describe("ctx.db capability", () => {
 
     const refs = (await ctx.db.refs()) as Record<string, unknown>;
 
-    expect(Object.keys(refs).sort()).toEqual(["hosts", "users"]);
+    expect(Object.keys(refs).sort()).toEqual([
+      "hosts",
+      "roles",
+      "userRoles",
+      "users",
+    ]);
   });
 });
 

src/backend/tests/plugins/permissions-rbac.test.ts

@@ -384,8 +384,18 @@ describe("shipped manifests keep their permission ids", () => {
     expect(idsFor("tailscale")).toEqual(["tailscale.devices.view"]);
   });
 
+  it("snippets", () => {
+    expect(idsFor("snippets")).toEqual([
+      "snippets.view",
+      "snippets.create",
+      "snippets.edit",
+      "snippets.delete",
+      "snippets.share",
+    ]);
+  });
+
   it("a role holding the old ids still validates once registered", () => {
-    for (const pluginId of ["ai", "automations", "tailscale"]) {
+    for (const pluginId of ["ai", "automations", "tailscale", "snippets"]) {
       const ids = idsFor(pluginId);
       registerPluginPermissions({
         group: pluginId,
@@ -402,6 +412,8 @@ describe("shipped manifests keep their permission ids", () => {
       "automations.run",
       "automations.view",
       "tailscale.devices.view",
+      "snippets.view",
+      "snippets.share",
     ];
 
     expect(stored.filter((entry) => !isValidPermission(entry))).toEqual([]);

src/backend/tests/plugins/sync-registry.test.ts

@@ -96,19 +96,26 @@ describe("core sync entities", () => {
     registerCoreSyncEntities();
   });
 
+  // The frozen array also lists networkTopology and snippets/snippetFolders,
+  // now registered by the network-topology and snippets plugins rather than
+  // core.
+  const PLUGIN_OWNED_TYPES = new Set([
+    "networkTopology",
+    "snippets",
+    "snippetFolders",
+  ]);
+
   it("registers every core-owned entity the Electron client knows about", () => {
-    // The frozen array also lists networkTopology, which is now registered
-    // by the network-topology plugin rather than core.
     const coreTypes = new Set(listEntityTypes());
     for (const type of SYNCED_ENTITY_TYPES) {
-      if (type === "networkTopology") continue;
+      if (PLUGIN_OWNED_TYPES.has(type)) continue;
       expect(coreTypes.has(type), type).toBe(true);
     }
   });
 
   it("keeps the dependency order the frozen Electron array encodes", () => {
     expect(listEntityTypes()).toEqual(
-      [...SYNCED_ENTITY_TYPES].filter((type) => type !== "networkTopology"),
+      [...SYNCED_ENTITY_TYPES].filter((type) => !PLUGIN_OWNED_TYPES.has(type)),
     );
   });