feat: allow sharing opkssh-authenticated hosts

src/backend/database/routes/rbac.ts

@@ -128,10 +128,10 @@ router.post(
         return res.status(403).json({ error: "Not host owner" });
       }
 
-      if (!host[0].credentialId) {
+      if (!host[0].credentialId && host[0].authType !== "opkssh") {
         return res.status(400).json({
           error:
-            "Only hosts using credentials can be shared. Please create a credential and assign it to this host before sharing.",
+            "Only hosts using credentials or OPKSSH can be shared. Please create a credential and assign it to this host before sharing.",
           code: "CREDENTIAL_REQUIRED_FOR_SHARING",
         });
       }
@@ -203,6 +203,7 @@ router.post(
           .delete(sharedCredentials)
           .where(eq(sharedCredentials.hostAccessId, existing[0].id));
 
+        if (host[0].credentialId) {
           const { SharedCredentialManager } =
             await import("../../utils/shared-credential-manager.js");
           const sharedCredManager = SharedCredentialManager.getInstance();
@@ -221,6 +222,7 @@ router.post(
               userId,
             );
           }
+        }
         databaseLogger.info("Permission granted", {
           operation: "rbac_permission_grant",
           adminId: userId,
@@ -249,6 +251,7 @@ router.post(
         await import("../../utils/shared-credential-manager.js");
       const sharedCredManager = SharedCredentialManager.getInstance();
 
+      if (host[0].credentialId) {
         if (targetType === "user") {
           await sharedCredManager.createSharedCredentialForUser(
             result.lastInsertRowid as number,
@@ -264,6 +267,7 @@ router.post(
             userId,
           );
         }
+      }
       databaseLogger.success("Host shared successfully", {
         operation: "rbac_host_share_success",
         userId,