diff --git a/docker/nginx-https.conf b/docker/nginx-https.conf
index 9b02c2ecd..421584fd6 100644
--- a/docker/nginx-https.conf
+++ b/docker/nginx-https.conf
@@ -249,6 +249,15 @@ http {
proxy_read_timeout 300s;
}
+ location ~ ^/ssh-auth(/.*)?$ {
+ proxy_pass http://127.0.0.1:30001;
+ proxy_http_version 1.1;
+ proxy_set_header Host $http_host;
+ proxy_set_header X-Real-IP $remote_addr;
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+ proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
+ }
+
location ~ ^/snippets(/.*)?$ {
proxy_pass http://127.0.0.1:30001;
proxy_http_version 1.1;
diff --git a/docker/nginx.conf b/docker/nginx.conf
index f12cd8176..21fc58c20 100644
--- a/docker/nginx.conf
+++ b/docker/nginx.conf
@@ -229,6 +229,15 @@ http {
proxy_read_timeout 300s;
}
+ location ~ ^/ssh-auth(/.*)?$ {
+ proxy_pass http://127.0.0.1:30001;
+ proxy_http_version 1.1;
+ proxy_set_header Host $http_host;
+ proxy_set_header X-Real-IP $remote_addr;
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+ proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
+ }
+
location ~ ^/snippets(/.*)?$ {
proxy_pass http://127.0.0.1:30001;
proxy_http_version 1.1;
diff --git a/drizzle/mysql/0030_sweet_warlock.sql b/drizzle/mysql/0030_sweet_warlock.sql
new file mode 100644
index 000000000..c346763be
--- /dev/null
+++ b/drizzle/mysql/0030_sweet_warlock.sql
@@ -0,0 +1,24 @@
+CREATE TABLE `user_external_identities` (
+ `id` int AUTO_INCREMENT NOT NULL,
+ `user_id` varchar(255) NOT NULL,
+ `provider_id` varchar(255) NOT NULL,
+ `subject` varchar(255) NOT NULL,
+ `email` text,
+ `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
+ CONSTRAINT `user_external_identities_id` PRIMARY KEY(`id`),
+ CONSTRAINT `idx_user_external_identities_provider_subject` UNIQUE(`provider_id`,`subject`)
+);
+--> statement-breakpoint
+CREATE TABLE `user_second_factors` (
+ `id` int AUTO_INCREMENT NOT NULL,
+ `user_id` varchar(255) NOT NULL,
+ `plugin_id` varchar(255) NOT NULL,
+ `factor_id` varchar(255) NOT NULL,
+ `enrolled_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
+ CONSTRAINT `user_second_factors_id` PRIMARY KEY(`id`),
+ CONSTRAINT `idx_user_second_factors_user_factor` UNIQUE(`user_id`,`plugin_id`,`factor_id`)
+);
+--> statement-breakpoint
+ALTER TABLE `user_external_identities` ADD CONSTRAINT `user_external_identities_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE `user_second_factors` ADD CONSTRAINT `user_second_factors_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX `idx_user_external_identities_user` ON `user_external_identities` (`user_id`);
\ No newline at end of file
diff --git a/drizzle/mysql/meta/0030_snapshot.json b/drizzle/mysql/meta/0030_snapshot.json
new file mode 100644
index 000000000..400ccd025
--- /dev/null
+++ b/drizzle/mysql/meta/0030_snapshot.json
@@ -0,0 +1,10229 @@
+{
+ "version": "5",
+ "dialect": "mysql",
+ "id": "aaa5343a-0c28-489a-aab5-f582eefa947c",
+ "prevId": "b2e69137-0d9e-4e84-8259-6f104a7ce2fb",
+ "tables": {
+ "ai_conversations": {
+ "name": "ai_conversations",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "title": {
+ "name": "title",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "provider_id": {
+ "name": "provider_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "model": {
+ "name": "model",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_ai_conversations_user": {
+ "name": "idx_ai_conversations_user",
+ "columns": [
+ "user_id",
+ "updated_at"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "ai_conversations_user_id_users_id_fk": {
+ "name": "ai_conversations_user_id_users_id_fk",
+ "tableFrom": "ai_conversations",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "ai_conversations_id": {
+ "name": "ai_conversations_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "ai_messages": {
+ "name": "ai_messages",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "conversation_id": {
+ "name": "conversation_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "role": {
+ "name": "role",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "content": {
+ "name": "content",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('')"
+ },
+ "tool_calls": {
+ "name": "tool_calls",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_ai_messages_conversation": {
+ "name": "idx_ai_messages_conversation",
+ "columns": [
+ "conversation_id",
+ "created_at"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "ai_messages_conversation_id_ai_conversations_id_fk": {
+ "name": "ai_messages_conversation_id_ai_conversations_id_fk",
+ "tableFrom": "ai_messages",
+ "tableTo": "ai_conversations",
+ "columnsFrom": [
+ "conversation_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "ai_messages_id": {
+ "name": "ai_messages_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "ai_proposals": {
+ "name": "ai_proposals",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "conversation_id": {
+ "name": "conversation_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "kind": {
+ "name": "kind",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "summary": {
+ "name": "summary",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "payload": {
+ "name": "payload",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('{}')"
+ },
+ "status": {
+ "name": "status",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'pending'"
+ },
+ "applied_at": {
+ "name": "applied_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "result_summary": {
+ "name": "result_summary",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_ai_proposals_user": {
+ "name": "idx_ai_proposals_user",
+ "columns": [
+ "user_id",
+ "status"
+ ],
+ "isUnique": false
+ },
+ "idx_ai_proposals_conversation": {
+ "name": "idx_ai_proposals_conversation",
+ "columns": [
+ "conversation_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "ai_proposals_conversation_id_ai_conversations_id_fk": {
+ "name": "ai_proposals_conversation_id_ai_conversations_id_fk",
+ "tableFrom": "ai_proposals",
+ "tableTo": "ai_conversations",
+ "columnsFrom": [
+ "conversation_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "ai_proposals_user_id_users_id_fk": {
+ "name": "ai_proposals_user_id_users_id_fk",
+ "tableFrom": "ai_proposals",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "ai_proposals_id": {
+ "name": "ai_proposals_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "ai_providers": {
+ "name": "ai_providers",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "provider_type": {
+ "name": "provider_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "label": {
+ "name": "label",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "base_url": {
+ "name": "base_url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "api_key": {
+ "name": "api_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "api_key_prefix": {
+ "name": "api_key_prefix",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "default_model": {
+ "name": "default_model",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "enabled": {
+ "name": "enabled",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_ai_providers_user_label": {
+ "name": "idx_ai_providers_user_label",
+ "columns": [
+ "user_id",
+ "label"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "ai_providers_user_id_users_id_fk": {
+ "name": "ai_providers_user_id_users_id_fk",
+ "tableFrom": "ai_providers",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "ai_providers_id": {
+ "name": "ai_providers_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "api_keys": {
+ "name": "api_keys",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "token_hash": {
+ "name": "token_hash",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "token_prefix": {
+ "name": "token_prefix",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "last_used_at": {
+ "name": "last_used_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "is_active": {
+ "name": "is_active",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ }
+ },
+ "indexes": {
+ "idx_api_keys_user_id": {
+ "name": "idx_api_keys_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "api_keys_user_id_users_id_fk": {
+ "name": "api_keys_user_id_users_id_fk",
+ "tableFrom": "api_keys",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "api_keys_id": {
+ "name": "api_keys_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "audit_logs": {
+ "name": "audit_logs",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "username": {
+ "name": "username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "action": {
+ "name": "action",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "resource_type": {
+ "name": "resource_type",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "resource_id": {
+ "name": "resource_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "resource_name": {
+ "name": "resource_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "details": {
+ "name": "details",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "ip_address": {
+ "name": "ip_address",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "user_agent": {
+ "name": "user_agent",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "success": {
+ "name": "success",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "error_message": {
+ "name": "error_message",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "timestamp": {
+ "name": "timestamp",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_audit_logs_timestamp": {
+ "name": "idx_audit_logs_timestamp",
+ "columns": [
+ "timestamp"
+ ],
+ "isUnique": false
+ },
+ "idx_audit_logs_user_ts": {
+ "name": "idx_audit_logs_user_ts",
+ "columns": [
+ "user_id",
+ "timestamp"
+ ],
+ "isUnique": false
+ },
+ "idx_audit_logs_action_ts": {
+ "name": "idx_audit_logs_action_ts",
+ "columns": [
+ "action",
+ "timestamp"
+ ],
+ "isUnique": false
+ },
+ "idx_audit_logs_resource_ts": {
+ "name": "idx_audit_logs_resource_ts",
+ "columns": [
+ "resource_type",
+ "timestamp"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "audit_logs_user_id_users_id_fk": {
+ "name": "audit_logs_user_id_users_id_fk",
+ "tableFrom": "audit_logs",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "audit_logs_id": {
+ "name": "audit_logs_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "automation_channels": {
+ "name": "automation_channels",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "automation_id": {
+ "name": "automation_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "channel_id": {
+ "name": "channel_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ }
+ },
+ "indexes": {
+ "idx_automation_channels_pair": {
+ "name": "idx_automation_channels_pair",
+ "columns": [
+ "automation_id",
+ "channel_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "automation_channels_automation_id_automations_id_fk": {
+ "name": "automation_channels_automation_id_automations_id_fk",
+ "tableFrom": "automation_channels",
+ "tableTo": "automations",
+ "columnsFrom": [
+ "automation_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "automation_channels_channel_id_notification_channels_id_fk": {
+ "name": "automation_channels_channel_id_notification_channels_id_fk",
+ "tableFrom": "automation_channels",
+ "tableTo": "notification_channels",
+ "columnsFrom": [
+ "channel_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "automation_channels_id": {
+ "name": "automation_channels_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "automation_run_steps": {
+ "name": "automation_run_steps",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "run_id": {
+ "name": "run_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "step_index": {
+ "name": "step_index",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "step_id": {
+ "name": "step_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "step_type": {
+ "name": "step_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "status": {
+ "name": "status",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "started_at": {
+ "name": "started_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "finished_at": {
+ "name": "finished_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "output": {
+ "name": "output",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "error": {
+ "name": "error",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "truncated": {
+ "name": "truncated",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ }
+ },
+ "indexes": {
+ "idx_automation_run_steps_run": {
+ "name": "idx_automation_run_steps_run",
+ "columns": [
+ "run_id",
+ "step_index"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "automation_run_steps_run_id_automation_runs_id_fk": {
+ "name": "automation_run_steps_run_id_automation_runs_id_fk",
+ "tableFrom": "automation_run_steps",
+ "tableTo": "automation_runs",
+ "columnsFrom": [
+ "run_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "automation_run_steps_id": {
+ "name": "automation_run_steps_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "automation_runs": {
+ "name": "automation_runs",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "automation_id": {
+ "name": "automation_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "trigger_type": {
+ "name": "trigger_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "trigger_context": {
+ "name": "trigger_context",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "status": {
+ "name": "status",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "started_at": {
+ "name": "started_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "finished_at": {
+ "name": "finished_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "duration_ms": {
+ "name": "duration_ms",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "error": {
+ "name": "error",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "dry_run": {
+ "name": "dry_run",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "parent_run_id": {
+ "name": "parent_run_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {
+ "idx_automation_runs_automation": {
+ "name": "idx_automation_runs_automation",
+ "columns": [
+ "automation_id",
+ "started_at"
+ ],
+ "isUnique": false
+ },
+ "idx_automation_runs_user": {
+ "name": "idx_automation_runs_user",
+ "columns": [
+ "user_id",
+ "started_at"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "automation_runs_automation_id_automations_id_fk": {
+ "name": "automation_runs_automation_id_automations_id_fk",
+ "tableFrom": "automation_runs",
+ "tableTo": "automations",
+ "columnsFrom": [
+ "automation_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "automation_runs_user_id_users_id_fk": {
+ "name": "automation_runs_user_id_users_id_fk",
+ "tableFrom": "automation_runs",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "automation_runs_id": {
+ "name": "automation_runs_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "automation_schedules": {
+ "name": "automation_schedules",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "automation_id": {
+ "name": "automation_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "cron": {
+ "name": "cron",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "interval_seconds": {
+ "name": "interval_seconds",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "timezone": {
+ "name": "timezone",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "next_due_at": {
+ "name": "next_due_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "last_tick_at": {
+ "name": "last_tick_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {
+ "idx_automation_schedules_automation": {
+ "name": "idx_automation_schedules_automation",
+ "columns": [
+ "automation_id"
+ ],
+ "isUnique": true
+ },
+ "idx_automation_schedules_due": {
+ "name": "idx_automation_schedules_due",
+ "columns": [
+ "next_due_at"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "automation_schedules_automation_id_automations_id_fk": {
+ "name": "automation_schedules_automation_id_automations_id_fk",
+ "tableFrom": "automation_schedules",
+ "tableTo": "automations",
+ "columnsFrom": [
+ "automation_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "automation_schedules_id": {
+ "name": "automation_schedules_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "automation_trigger_state": {
+ "name": "automation_trigger_state",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "automation_id": {
+ "name": "automation_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "state_key": {
+ "name": "state_key",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "breach_started_at": {
+ "name": "breach_started_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "last_fired_at": {
+ "name": "last_fired_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "last_value": {
+ "name": "last_value",
+ "type": "double",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "last_observed_state": {
+ "name": "last_observed_state",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_automation_trigger_state_key": {
+ "name": "idx_automation_trigger_state_key",
+ "columns": [
+ "automation_id",
+ "state_key"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "automation_trigger_state_automation_id_automations_id_fk": {
+ "name": "automation_trigger_state_automation_id_automations_id_fk",
+ "tableFrom": "automation_trigger_state",
+ "tableTo": "automations",
+ "columnsFrom": [
+ "automation_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "automation_trigger_state_id": {
+ "name": "automation_trigger_state_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "automations": {
+ "name": "automations",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "enabled": {
+ "name": "enabled",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "definition": {
+ "name": "definition",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "definition_version": {
+ "name": "definition_version",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 1
+ },
+ "concurrency_policy": {
+ "name": "concurrency_policy",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('skip')"
+ },
+ "max_run_seconds": {
+ "name": "max_run_seconds",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 300
+ },
+ "dry_run": {
+ "name": "dry_run",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "last_run_at": {
+ "name": "last_run_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "last_run_status": {
+ "name": "last_run_status",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_automations_user": {
+ "name": "idx_automations_user",
+ "columns": [
+ "user_id",
+ "enabled"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "automations_user_id_users_id_fk": {
+ "name": "automations_user_id_users_id_fk",
+ "tableFrom": "automations",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "automations_id": {
+ "name": "automations_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "c2s_tunnel_presets": {
+ "name": "c2s_tunnel_presets",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "config": {
+ "name": "config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "platform": {
+ "name": "platform",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "computer_name": {
+ "name": "computer_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "c2s_tunnel_presets_user_id_users_id_fk": {
+ "name": "c2s_tunnel_presets_user_id_users_id_fk",
+ "tableFrom": "c2s_tunnel_presets",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "c2s_tunnel_presets_id": {
+ "name": "c2s_tunnel_presets_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "collab_room_members": {
+ "name": "collab_room_members",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "room_id": {
+ "name": "room_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "room_role": {
+ "name": "room_role",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('member')"
+ },
+ "added_by": {
+ "name": "added_by",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_collab_room_members_room_user": {
+ "name": "idx_collab_room_members_room_user",
+ "columns": [
+ "room_id",
+ "user_id"
+ ],
+ "isUnique": true
+ },
+ "idx_collab_room_members_user": {
+ "name": "idx_collab_room_members_user",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "collab_room_members_room_id_collab_rooms_id_fk": {
+ "name": "collab_room_members_room_id_collab_rooms_id_fk",
+ "tableFrom": "collab_room_members",
+ "tableTo": "collab_rooms",
+ "columnsFrom": [
+ "room_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "collab_room_members_user_id_users_id_fk": {
+ "name": "collab_room_members_user_id_users_id_fk",
+ "tableFrom": "collab_room_members",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "collab_room_members_added_by_users_id_fk": {
+ "name": "collab_room_members_added_by_users_id_fk",
+ "tableFrom": "collab_room_members",
+ "tableTo": "users",
+ "columnsFrom": [
+ "added_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "collab_room_members_id": {
+ "name": "collab_room_members_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "collab_rooms": {
+ "name": "collab_rooms",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "owner_user_id": {
+ "name": "owner_user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "persistent": {
+ "name": "persistent",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "presenter_user_id": {
+ "name": "presenter_user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "stage_protocol": {
+ "name": "stage_protocol",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "stage_host_id": {
+ "name": "stage_host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "stage_share_id": {
+ "name": "stage_share_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "guest_link_token": {
+ "name": "guest_link_token",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "ended_at": {
+ "name": "ended_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {
+ "idx_collab_rooms_owner": {
+ "name": "idx_collab_rooms_owner",
+ "columns": [
+ "owner_user_id"
+ ],
+ "isUnique": false
+ },
+ "idx_collab_rooms_guest_token": {
+ "name": "idx_collab_rooms_guest_token",
+ "columns": [
+ "guest_link_token"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "collab_rooms_owner_user_id_users_id_fk": {
+ "name": "collab_rooms_owner_user_id_users_id_fk",
+ "tableFrom": "collab_rooms",
+ "tableTo": "users",
+ "columnsFrom": [
+ "owner_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "collab_rooms_presenter_user_id_users_id_fk": {
+ "name": "collab_rooms_presenter_user_id_users_id_fk",
+ "tableFrom": "collab_rooms",
+ "tableTo": "users",
+ "columnsFrom": [
+ "presenter_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "collab_rooms_stage_host_id_ssh_data_id_fk": {
+ "name": "collab_rooms_stage_host_id_ssh_data_id_fk",
+ "tableFrom": "collab_rooms",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "stage_host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "collab_rooms_stage_share_id_session_shares_id_fk": {
+ "name": "collab_rooms_stage_share_id_session_shares_id_fk",
+ "tableFrom": "collab_rooms",
+ "tableTo": "session_shares",
+ "columnsFrom": [
+ "stage_share_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "collab_rooms_id": {
+ "name": "collab_rooms_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "command_history": {
+ "name": "command_history",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "command": {
+ "name": "command",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "executed_at": {
+ "name": "executed_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_command_history_user_host": {
+ "name": "idx_command_history_user_host",
+ "columns": [
+ "user_id",
+ "host_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "command_history_user_id_users_id_fk": {
+ "name": "command_history_user_id_users_id_fk",
+ "tableFrom": "command_history",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "command_history_host_id_ssh_data_id_fk": {
+ "name": "command_history_host_id_ssh_data_id_fk",
+ "tableFrom": "command_history",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "command_history_id": {
+ "name": "command_history_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "credential_access": {
+ "name": "credential_access",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "role_id": {
+ "name": "role_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "granted_by": {
+ "name": "granted_by",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "permission_level": {
+ "name": "permission_level",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('use')"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_credential_access_user_id": {
+ "name": "idx_credential_access_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ },
+ "idx_credential_access_role_id": {
+ "name": "idx_credential_access_role_id",
+ "columns": [
+ "role_id"
+ ],
+ "isUnique": false
+ },
+ "idx_credential_access_credential_id": {
+ "name": "idx_credential_access_credential_id",
+ "columns": [
+ "credential_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "credential_access_credential_id_ssh_credentials_id_fk": {
+ "name": "credential_access_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "credential_access",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "credential_access_user_id_users_id_fk": {
+ "name": "credential_access_user_id_users_id_fk",
+ "tableFrom": "credential_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "credential_access_role_id_roles_id_fk": {
+ "name": "credential_access_role_id_roles_id_fk",
+ "tableFrom": "credential_access",
+ "tableTo": "roles",
+ "columnsFrom": [
+ "role_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "credential_access_granted_by_users_id_fk": {
+ "name": "credential_access_granted_by_users_id_fk",
+ "tableFrom": "credential_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "granted_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "credential_access_id": {
+ "name": "credential_access_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "credential_sidebar_preferences": {
+ "name": "credential_sidebar_preferences",
+ "columns": {
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "data": {
+ "name": "data",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "credential_sidebar_preferences_user_id_users_id_fk": {
+ "name": "credential_sidebar_preferences_user_id_users_id_fk",
+ "tableFrom": "credential_sidebar_preferences",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "credential_sidebar_preferences_user_id": {
+ "name": "credential_sidebar_preferences_user_id",
+ "columns": [
+ "user_id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "dashboard_service_links": {
+ "name": "dashboard_service_links",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "label": {
+ "name": "label",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "url": {
+ "name": "url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "order": {
+ "name": "order",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 0
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "dashboard_service_links_user_id_users_id_fk": {
+ "name": "dashboard_service_links_user_id_users_id_fk",
+ "tableFrom": "dashboard_service_links",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "dashboard_service_links_id": {
+ "name": "dashboard_service_links_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {
+ "dashboard_service_links_sync_id_unique": {
+ "name": "dashboard_service_links_sync_id_unique",
+ "columns": [
+ "sync_id"
+ ]
+ }
+ },
+ "checkConstraint": {}
+ },
+ "dismissed_alerts": {
+ "name": "dismissed_alerts",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "alert_id": {
+ "name": "alert_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "dismissed_at": {
+ "name": "dismissed_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_dismissed_alerts_user_id": {
+ "name": "idx_dismissed_alerts_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "dismissed_alerts_user_id_users_id_fk": {
+ "name": "dismissed_alerts_user_id_users_id_fk",
+ "tableFrom": "dismissed_alerts",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "dismissed_alerts_id": {
+ "name": "dismissed_alerts_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "file_manager_pinned": {
+ "name": "file_manager_pinned",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "path": {
+ "name": "path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "pinned_at": {
+ "name": "pinned_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_file_manager_pinned_user": {
+ "name": "idx_file_manager_pinned_user",
+ "columns": [
+ "user_id",
+ "host_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "file_manager_pinned_user_id_users_id_fk": {
+ "name": "file_manager_pinned_user_id_users_id_fk",
+ "tableFrom": "file_manager_pinned",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "file_manager_pinned_host_id_ssh_data_id_fk": {
+ "name": "file_manager_pinned_host_id_ssh_data_id_fk",
+ "tableFrom": "file_manager_pinned",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "file_manager_pinned_id": {
+ "name": "file_manager_pinned_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "file_manager_recent": {
+ "name": "file_manager_recent",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "path": {
+ "name": "path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "last_opened": {
+ "name": "last_opened",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_file_manager_recent_user": {
+ "name": "idx_file_manager_recent_user",
+ "columns": [
+ "user_id",
+ "host_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "file_manager_recent_user_id_users_id_fk": {
+ "name": "file_manager_recent_user_id_users_id_fk",
+ "tableFrom": "file_manager_recent",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "file_manager_recent_host_id_ssh_data_id_fk": {
+ "name": "file_manager_recent_host_id_ssh_data_id_fk",
+ "tableFrom": "file_manager_recent",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "file_manager_recent_id": {
+ "name": "file_manager_recent_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "file_manager_shortcuts": {
+ "name": "file_manager_shortcuts",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "path": {
+ "name": "path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_file_manager_shortcuts_user": {
+ "name": "idx_file_manager_shortcuts_user",
+ "columns": [
+ "user_id",
+ "host_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "file_manager_shortcuts_user_id_users_id_fk": {
+ "name": "file_manager_shortcuts_user_id_users_id_fk",
+ "tableFrom": "file_manager_shortcuts",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "file_manager_shortcuts_host_id_ssh_data_id_fk": {
+ "name": "file_manager_shortcuts_host_id_ssh_data_id_fk",
+ "tableFrom": "file_manager_shortcuts",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "file_manager_shortcuts_id": {
+ "name": "file_manager_shortcuts_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "fleet_inventory": {
+ "name": "fleet_inventory",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "os_pretty_name": {
+ "name": "os_pretty_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "kernel": {
+ "name": "kernel",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "architecture": {
+ "name": "architecture",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "hostname": {
+ "name": "hostname",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "uptime_seconds": {
+ "name": "uptime_seconds",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "ip": {
+ "name": "ip",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "package_manager": {
+ "name": "package_manager",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "collected_at": {
+ "name": "collected_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_fleet_inventory_host": {
+ "name": "idx_fleet_inventory_host",
+ "columns": [
+ "host_id",
+ "user_id"
+ ],
+ "isUnique": true
+ },
+ "idx_fleet_inventory_user": {
+ "name": "idx_fleet_inventory_user",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "fleet_inventory_host_id_ssh_data_id_fk": {
+ "name": "fleet_inventory_host_id_ssh_data_id_fk",
+ "tableFrom": "fleet_inventory",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "fleet_inventory_user_id_users_id_fk": {
+ "name": "fleet_inventory_user_id_users_id_fk",
+ "tableFrom": "fleet_inventory",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "fleet_inventory_id": {
+ "name": "fleet_inventory_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "fleet_members": {
+ "name": "fleet_members",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "fleet_id": {
+ "name": "fleet_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "added_at": {
+ "name": "added_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_fleet_members_fleet_host": {
+ "name": "idx_fleet_members_fleet_host",
+ "columns": [
+ "fleet_id",
+ "host_id"
+ ],
+ "isUnique": true
+ },
+ "idx_fleet_members_host": {
+ "name": "idx_fleet_members_host",
+ "columns": [
+ "host_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "fleet_members_fleet_id_fleets_id_fk": {
+ "name": "fleet_members_fleet_id_fleets_id_fk",
+ "tableFrom": "fleet_members",
+ "tableTo": "fleets",
+ "columnsFrom": [
+ "fleet_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "fleet_members_host_id_ssh_data_id_fk": {
+ "name": "fleet_members_host_id_ssh_data_id_fk",
+ "tableFrom": "fleet_members",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "fleet_members_id": {
+ "name": "fleet_members_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "fleets": {
+ "name": "fleets",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "color": {
+ "name": "color",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "icon": {
+ "name": "icon",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "tag_rules": {
+ "name": "tag_rules",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "fleets_user_id_users_id_fk": {
+ "name": "fleets_user_id_users_id_fk",
+ "tableFrom": "fleets",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "fleets_id": {
+ "name": "fleets_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {
+ "fleets_sync_id_unique": {
+ "name": "fleets_sync_id_unique",
+ "columns": [
+ "sync_id"
+ ]
+ }
+ },
+ "checkConstraint": {}
+ },
+ "folder_access": {
+ "name": "folder_access",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "owner_user_id": {
+ "name": "owner_user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "folder": {
+ "name": "folder",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "role_id": {
+ "name": "role_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "granted_by": {
+ "name": "granted_by",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "permission_level": {
+ "name": "permission_level",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('connect')"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_folder_access_owner_folder": {
+ "name": "idx_folder_access_owner_folder",
+ "columns": [
+ "owner_user_id",
+ "folder"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "folder_access_owner_user_id_users_id_fk": {
+ "name": "folder_access_owner_user_id_users_id_fk",
+ "tableFrom": "folder_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "owner_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "folder_access_user_id_users_id_fk": {
+ "name": "folder_access_user_id_users_id_fk",
+ "tableFrom": "folder_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "folder_access_role_id_roles_id_fk": {
+ "name": "folder_access_role_id_roles_id_fk",
+ "tableFrom": "folder_access",
+ "tableTo": "roles",
+ "columnsFrom": [
+ "role_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "folder_access_granted_by_users_id_fk": {
+ "name": "folder_access_granted_by_users_id_fk",
+ "tableFrom": "folder_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "granted_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "folder_access_id": {
+ "name": "folder_access_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "homepage_items": {
+ "name": "homepage_items",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "type_id": {
+ "name": "type_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "title": {
+ "name": "title",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "config": {
+ "name": "config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('{}')"
+ },
+ "folder_id": {
+ "name": "folder_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_homepage_items_user_id": {
+ "name": "idx_homepage_items_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "homepage_items_user_id_users_id_fk": {
+ "name": "homepage_items_user_id_users_id_fk",
+ "tableFrom": "homepage_items",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "homepage_items_id": {
+ "name": "homepage_items_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {
+ "homepage_items_sync_id_unique": {
+ "name": "homepage_items_sync_id_unique",
+ "columns": [
+ "sync_id"
+ ]
+ }
+ },
+ "checkConstraint": {}
+ },
+ "homepage_layouts": {
+ "name": "homepage_layouts",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "layout": {
+ "name": "layout",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('{}')"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "homepage_layouts_user_id_users_id_fk": {
+ "name": "homepage_layouts_user_id_users_id_fk",
+ "tableFrom": "homepage_layouts",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "homepage_layouts_id": {
+ "name": "homepage_layouts_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {
+ "homepage_layouts_user_id_unique": {
+ "name": "homepage_layouts_user_id_unique",
+ "columns": [
+ "user_id"
+ ]
+ }
+ },
+ "checkConstraint": {}
+ },
+ "host_access": {
+ "name": "host_access",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "role_id": {
+ "name": "role_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "granted_by": {
+ "name": "granted_by",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "permission_level": {
+ "name": "permission_level",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('connect')"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "last_accessed_at": {
+ "name": "last_accessed_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "access_count": {
+ "name": "access_count",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 0
+ }
+ },
+ "indexes": {
+ "idx_host_access_user_id": {
+ "name": "idx_host_access_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ },
+ "idx_host_access_role_id": {
+ "name": "idx_host_access_role_id",
+ "columns": [
+ "role_id"
+ ],
+ "isUnique": false
+ },
+ "idx_host_access_host_id": {
+ "name": "idx_host_access_host_id",
+ "columns": [
+ "host_id"
+ ],
+ "isUnique": false
+ },
+ "idx_host_access_expires_at": {
+ "name": "idx_host_access_expires_at",
+ "columns": [
+ "expires_at"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "host_access_host_id_ssh_data_id_fk": {
+ "name": "host_access_host_id_ssh_data_id_fk",
+ "tableFrom": "host_access",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "host_access_user_id_users_id_fk": {
+ "name": "host_access_user_id_users_id_fk",
+ "tableFrom": "host_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "host_access_role_id_roles_id_fk": {
+ "name": "host_access_role_id_roles_id_fk",
+ "tableFrom": "host_access",
+ "tableTo": "roles",
+ "columnsFrom": [
+ "role_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "host_access_granted_by_users_id_fk": {
+ "name": "host_access_granted_by_users_id_fk",
+ "tableFrom": "host_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "granted_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "host_access_id": {
+ "name": "host_access_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "host_health_checks": {
+ "name": "host_health_checks",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "checks": {
+ "name": "checks",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "interval_seconds": {
+ "name": "interval_seconds",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 300
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_host_health_checks_user_host": {
+ "name": "idx_host_health_checks_user_host",
+ "columns": [
+ "user_id",
+ "host_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "host_health_checks_user_id_users_id_fk": {
+ "name": "host_health_checks_user_id_users_id_fk",
+ "tableFrom": "host_health_checks",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "host_health_checks_host_id_ssh_data_id_fk": {
+ "name": "host_health_checks_host_id_ssh_data_id_fk",
+ "tableFrom": "host_health_checks",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "host_health_checks_id": {
+ "name": "host_health_checks_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "host_health_history": {
+ "name": "host_health_history",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "check_id": {
+ "name": "check_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "ts": {
+ "name": "ts",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "ok": {
+ "name": "ok",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "latency_ms": {
+ "name": "latency_ms",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "detail": {
+ "name": "detail",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "host_health_history_user_id_users_id_fk": {
+ "name": "host_health_history_user_id_users_id_fk",
+ "tableFrom": "host_health_history",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "host_health_history_host_id_ssh_data_id_fk": {
+ "name": "host_health_history_host_id_ssh_data_id_fk",
+ "tableFrom": "host_health_history",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "host_health_history_id": {
+ "name": "host_health_history_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "host_metrics_history": {
+ "name": "host_metrics_history",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "ts": {
+ "name": "ts",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "cpu_percent": {
+ "name": "cpu_percent",
+ "type": "double",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "mem_percent": {
+ "name": "mem_percent",
+ "type": "double",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "disk_percent": {
+ "name": "disk_percent",
+ "type": "double",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "net_rx_bytes": {
+ "name": "net_rx_bytes",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "net_tx_bytes": {
+ "name": "net_tx_bytes",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "host_metrics_history_host_id_ssh_data_id_fk": {
+ "name": "host_metrics_history_host_id_ssh_data_id_fk",
+ "tableFrom": "host_metrics_history",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "host_metrics_history_id": {
+ "name": "host_metrics_history_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "host_metrics_preferences": {
+ "name": "host_metrics_preferences",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "layout": {
+ "name": "layout",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_host_metrics_prefs_user_host": {
+ "name": "idx_host_metrics_prefs_user_host",
+ "columns": [
+ "user_id",
+ "host_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "host_metrics_preferences_user_id_users_id_fk": {
+ "name": "host_metrics_preferences_user_id_users_id_fk",
+ "tableFrom": "host_metrics_preferences",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "host_metrics_preferences_host_id_ssh_data_id_fk": {
+ "name": "host_metrics_preferences_host_id_ssh_data_id_fk",
+ "tableFrom": "host_metrics_preferences",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "host_metrics_preferences_id": {
+ "name": "host_metrics_preferences_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "host_sidebar_preferences": {
+ "name": "host_sidebar_preferences",
+ "columns": {
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "data": {
+ "name": "data",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "host_sidebar_preferences_user_id_users_id_fk": {
+ "name": "host_sidebar_preferences_user_id_users_id_fk",
+ "tableFrom": "host_sidebar_preferences",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "host_sidebar_preferences_user_id": {
+ "name": "host_sidebar_preferences_user_id",
+ "columns": [
+ "user_id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "ssh_data": {
+ "name": "ssh_data",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "connection_type": {
+ "name": "connection_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('ssh')"
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "ip": {
+ "name": "ip",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "port": {
+ "name": "port",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "username": {
+ "name": "username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "folder": {
+ "name": "folder",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "parent_host_id": {
+ "name": "parent_host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "tags": {
+ "name": "tags",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "pin": {
+ "name": "pin",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "sort_order": {
+ "name": "sort_order",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "auth_type": {
+ "name": "auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "use_warpgate": {
+ "name": "use_warpgate",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "share_ssh_auth": {
+ "name": "share_ssh_auth",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "force_keyboard_interactive": {
+ "name": "force_keyboard_interactive",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "password": {
+ "name": "password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "key": {
+ "name": "key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "key_password": {
+ "name": "key_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "key_type": {
+ "name": "key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "sudo_password": {
+ "name": "sudo_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "autostart_password": {
+ "name": "autostart_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "autostart_key": {
+ "name": "autostart_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "autostart_key_password": {
+ "name": "autostart_key_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "override_credential_username": {
+ "name": "override_credential_username",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "vault_profile_id": {
+ "name": "vault_profile_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "enable_terminal": {
+ "name": "enable_terminal",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "enable_session_logging": {
+ "name": "enable_session_logging",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "allow_session_sharing": {
+ "name": "allow_session_sharing",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "enable_command_history": {
+ "name": "enable_command_history",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "enable_tunnel": {
+ "name": "enable_tunnel",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "tunnel_connections": {
+ "name": "tunnel_connections",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "jump_hosts": {
+ "name": "jump_hosts",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "enable_file_manager": {
+ "name": "enable_file_manager",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "scp_legacy": {
+ "name": "scp_legacy",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "enable_docker": {
+ "name": "enable_docker",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "enable_web_ui": {
+ "name": "enable_web_ui",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "enable_tmux_monitor": {
+ "name": "enable_tmux_monitor",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "enable_terminal_toolbar": {
+ "name": "enable_terminal_toolbar",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "enable_ai_assistant": {
+ "name": "enable_ai_assistant",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "show_terminal_in_sidebar": {
+ "name": "show_terminal_in_sidebar",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "show_file_manager_in_sidebar": {
+ "name": "show_file_manager_in_sidebar",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "show_tunnel_in_sidebar": {
+ "name": "show_tunnel_in_sidebar",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "show_docker_in_sidebar": {
+ "name": "show_docker_in_sidebar",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "show_server_stats_in_sidebar": {
+ "name": "show_server_stats_in_sidebar",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "default_path": {
+ "name": "default_path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "stats_config": {
+ "name": "stats_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "docker_config": {
+ "name": "docker_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "web_ui_config": {
+ "name": "web_ui_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "enable_proxmox": {
+ "name": "enable_proxmox",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "proxmox_config": {
+ "name": "proxmox_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "enable_proxmox_stats": {
+ "name": "enable_proxmox_stats",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "proxmox_stats_config": {
+ "name": "proxmox_stats_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "terminal_config": {
+ "name": "terminal_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "quick_actions": {
+ "name": "quick_actions",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "notes": {
+ "name": "notes",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "enable_ssh": {
+ "name": "enable_ssh",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "enable_rdp": {
+ "name": "enable_rdp",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "enable_vnc": {
+ "name": "enable_vnc",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "enable_telnet": {
+ "name": "enable_telnet",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "ssh_port": {
+ "name": "ssh_port",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false,
+ "default": 22
+ },
+ "rdp_port": {
+ "name": "rdp_port",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false,
+ "default": 3389
+ },
+ "vnc_port": {
+ "name": "vnc_port",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false,
+ "default": 5900
+ },
+ "telnet_port": {
+ "name": "telnet_port",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false,
+ "default": 23
+ },
+ "rdp_credential_id": {
+ "name": "rdp_credential_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "rdp_user": {
+ "name": "rdp_user",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "rdp_password": {
+ "name": "rdp_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "rdp_domain": {
+ "name": "rdp_domain",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "rdp_security": {
+ "name": "rdp_security",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "rdp_ignore_cert": {
+ "name": "rdp_ignore_cert",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false,
+ "default": false
+ },
+ "vnc_credential_id": {
+ "name": "vnc_credential_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "vnc_password": {
+ "name": "vnc_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "vnc_user": {
+ "name": "vnc_user",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "telnet_user": {
+ "name": "telnet_user",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "telnet_password": {
+ "name": "telnet_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "telnet_credential_id": {
+ "name": "telnet_credential_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "rdp_auth_type": {
+ "name": "rdp_auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "vnc_auth_type": {
+ "name": "vnc_auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "telnet_auth_type": {
+ "name": "telnet_auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "domain": {
+ "name": "domain",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "security": {
+ "name": "security",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "ignore_cert": {
+ "name": "ignore_cert",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false,
+ "default": false
+ },
+ "guacamole_config": {
+ "name": "guacamole_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "use_socks5": {
+ "name": "use_socks5",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "socks5_host": {
+ "name": "socks5_host",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "socks5_port": {
+ "name": "socks5_port",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "socks5_username": {
+ "name": "socks5_username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "socks5_password": {
+ "name": "socks5_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "socks5_proxy_chain": {
+ "name": "socks5_proxy_chain",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "connection_origin": {
+ "name": "connection_origin",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "mac_address": {
+ "name": "mac_address",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "wol_broadcast_address": {
+ "name": "wol_broadcast_address",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "port_knock_sequence": {
+ "name": "port_knock_sequence",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "host_key_fingerprint": {
+ "name": "host_key_fingerprint",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "host_key_type": {
+ "name": "host_key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "host_key_algorithm": {
+ "name": "host_key_algorithm",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false,
+ "default": "('sha256')"
+ },
+ "host_key_first_seen": {
+ "name": "host_key_first_seen",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "host_key_last_verified": {
+ "name": "host_key_last_verified",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "host_key_changed_count": {
+ "name": "host_key_changed_count",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false,
+ "default": 0
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_ssh_data_user_id": {
+ "name": "idx_ssh_data_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ },
+ "idx_ssh_data_parent_host": {
+ "name": "idx_ssh_data_parent_host",
+ "columns": [
+ "parent_host_id"
+ ],
+ "isUnique": false
+ },
+ "idx_ssh_data_credential": {
+ "name": "idx_ssh_data_credential",
+ "columns": [
+ "credential_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "ssh_data_user_id_users_id_fk": {
+ "name": "ssh_data_user_id_users_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "ssh_data_parent_host_id_ssh_data_id_fk": {
+ "name": "ssh_data_parent_host_id_ssh_data_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "parent_host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "ssh_data_credential_id_ssh_credentials_id_fk": {
+ "name": "ssh_data_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "ssh_data_vault_profile_id_vault_profiles_id_fk": {
+ "name": "ssh_data_vault_profile_id_vault_profiles_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "vault_profiles",
+ "columnsFrom": [
+ "vault_profile_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "ssh_data_rdp_credential_id_ssh_credentials_id_fk": {
+ "name": "ssh_data_rdp_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "rdp_credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "ssh_data_vnc_credential_id_ssh_credentials_id_fk": {
+ "name": "ssh_data_vnc_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "vnc_credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "ssh_data_telnet_credential_id_ssh_credentials_id_fk": {
+ "name": "ssh_data_telnet_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "telnet_credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "ssh_data_id": {
+ "name": "ssh_data_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {
+ "ssh_data_sync_id_unique": {
+ "name": "ssh_data_sync_id_unique",
+ "columns": [
+ "sync_id"
+ ]
+ }
+ },
+ "checkConstraint": {}
+ },
+ "network_topology": {
+ "name": "network_topology",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "topology": {
+ "name": "topology",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "network_topology_user_id_users_id_fk": {
+ "name": "network_topology_user_id_users_id_fk",
+ "tableFrom": "network_topology",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "network_topology_id": {
+ "name": "network_topology_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "notification_channels": {
+ "name": "notification_channels",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "type": {
+ "name": "type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "config": {
+ "name": "config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "enabled": {
+ "name": "enabled",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "notification_channels_user_id_users_id_fk": {
+ "name": "notification_channels_user_id_users_id_fk",
+ "tableFrom": "notification_channels",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "notification_channels_id": {
+ "name": "notification_channels_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "opkssh_tokens": {
+ "name": "opkssh_tokens",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "ssh_cert": {
+ "name": "ssh_cert",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "private_key": {
+ "name": "private_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "email": {
+ "name": "email",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "sub": {
+ "name": "sub",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "issuer": {
+ "name": "issuer",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "audience": {
+ "name": "audience",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "last_used": {
+ "name": "last_used",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {
+ "idx_opkssh_tokens_user_host": {
+ "name": "idx_opkssh_tokens_user_host",
+ "columns": [
+ "user_id",
+ "host_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "opkssh_tokens_user_id_users_id_fk": {
+ "name": "opkssh_tokens_user_id_users_id_fk",
+ "tableFrom": "opkssh_tokens",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "opkssh_tokens_host_id_ssh_data_id_fk": {
+ "name": "opkssh_tokens_host_id_ssh_data_id_fk",
+ "tableFrom": "opkssh_tokens",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "opkssh_tokens_id": {
+ "name": "opkssh_tokens_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "plugin_install_counts": {
+ "name": "plugin_install_counts",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "registry_id": {
+ "name": "registry_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "count": {
+ "name": "count",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 0
+ },
+ "source": {
+ "name": "source",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('aggregate-telemetry')"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_plugin_install_counts_plugin_registry": {
+ "name": "idx_plugin_install_counts_plugin_registry",
+ "columns": [
+ "plugin_id",
+ "registry_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {},
+ "compositePrimaryKeys": {
+ "plugin_install_counts_id": {
+ "name": "plugin_install_counts_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "plugin_migrations": {
+ "name": "plugin_migrations",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "migration_id": {
+ "name": "migration_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "checksum": {
+ "name": "checksum",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "applied_at": {
+ "name": "applied_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_plugin_migrations_plugin_migration": {
+ "name": "idx_plugin_migrations_plugin_migration",
+ "columns": [
+ "plugin_id",
+ "migration_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "plugin_migrations_plugin_id_plugins_id_fk": {
+ "name": "plugin_migrations_plugin_id_plugins_id_fk",
+ "tableFrom": "plugin_migrations",
+ "tableTo": "plugins",
+ "columnsFrom": [
+ "plugin_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "plugin_migrations_id": {
+ "name": "plugin_migrations_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "plugin_permission_grants": {
+ "name": "plugin_permission_grants",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "capability": {
+ "name": "capability",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "granted_at": {
+ "name": "granted_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "granted_by": {
+ "name": "granted_by",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "source": {
+ "name": "source",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('admin')"
+ }
+ },
+ "indexes": {
+ "idx_plugin_permission_grants_plugin_capability": {
+ "name": "idx_plugin_permission_grants_plugin_capability",
+ "columns": [
+ "plugin_id",
+ "capability"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "plugin_permission_grants_plugin_id_plugins_id_fk": {
+ "name": "plugin_permission_grants_plugin_id_plugins_id_fk",
+ "tableFrom": "plugin_permission_grants",
+ "tableTo": "plugins",
+ "columnsFrom": [
+ "plugin_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "plugin_permission_grants_granted_by_users_id_fk": {
+ "name": "plugin_permission_grants_granted_by_users_id_fk",
+ "tableFrom": "plugin_permission_grants",
+ "tableTo": "users",
+ "columnsFrom": [
+ "granted_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "plugin_permission_grants_id": {
+ "name": "plugin_permission_grants_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "plugin_registries": {
+ "name": "plugin_registries",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "url": {
+ "name": "url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "kind": {
+ "name": "kind",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('community')"
+ },
+ "enabled": {
+ "name": "enabled",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "signing_key": {
+ "name": "signing_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "last_checked_at": {
+ "name": "last_checked_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "last_index_hash": {
+ "name": "last_index_hash",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {},
+ "compositePrimaryKeys": {
+ "plugin_registries_id": {
+ "name": "plugin_registries_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "plugin_settings": {
+ "name": "plugin_settings",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "scope": {
+ "name": "scope",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "scope_id": {
+ "name": "scope_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "key": {
+ "name": "key",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "value": {
+ "name": "value",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "encrypted": {
+ "name": "encrypted",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_plugin_settings_scope_key": {
+ "name": "idx_plugin_settings_scope_key",
+ "columns": [
+ "plugin_id",
+ "scope",
+ "scope_id",
+ "key"
+ ],
+ "isUnique": true
+ },
+ "idx_plugin_settings_plugin_scope": {
+ "name": "idx_plugin_settings_plugin_scope",
+ "columns": [
+ "plugin_id",
+ "scope"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "plugin_settings_plugin_id_plugins_id_fk": {
+ "name": "plugin_settings_plugin_id_plugins_id_fk",
+ "tableFrom": "plugin_settings",
+ "tableTo": "plugins",
+ "columnsFrom": [
+ "plugin_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "plugin_settings_id": {
+ "name": "plugin_settings_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "plugin_storage": {
+ "name": "plugin_storage",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "key": {
+ "name": "key",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "value": {
+ "name": "value",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_plugin_storage_plugin_key": {
+ "name": "idx_plugin_storage_plugin_key",
+ "columns": [
+ "plugin_id",
+ "key"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "plugin_storage_plugin_id_plugins_id_fk": {
+ "name": "plugin_storage_plugin_id_plugins_id_fk",
+ "tableFrom": "plugin_storage",
+ "tableTo": "plugins",
+ "columnsFrom": [
+ "plugin_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "plugin_storage_id": {
+ "name": "plugin_storage_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "plugins": {
+ "name": "plugins",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "version": {
+ "name": "version",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "tier": {
+ "name": "tier",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('available')"
+ },
+ "source": {
+ "name": "source",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('community')"
+ },
+ "registry_id": {
+ "name": "registry_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "state": {
+ "name": "state",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('disabled')"
+ },
+ "last_error": {
+ "name": "last_error",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "installed_at": {
+ "name": "installed_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "auto_update": {
+ "name": "auto_update",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "manifest_json": {
+ "name": "manifest_json",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ }
+ },
+ "indexes": {
+ "idx_plugins_registry_id": {
+ "name": "idx_plugins_registry_id",
+ "columns": [
+ "registry_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {},
+ "compositePrimaryKeys": {
+ "plugins_id": {
+ "name": "plugins_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "proxmox_node_history": {
+ "name": "proxmox_node_history",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "ts": {
+ "name": "ts",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "cpu_percent": {
+ "name": "cpu_percent",
+ "type": "double",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "mem_percent": {
+ "name": "mem_percent",
+ "type": "double",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "disk_percent": {
+ "name": "disk_percent",
+ "type": "double",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "net_rx_bytes": {
+ "name": "net_rx_bytes",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "net_tx_bytes": {
+ "name": "net_tx_bytes",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "proxmox_node_history_host_id_ssh_data_id_fk": {
+ "name": "proxmox_node_history_host_id_ssh_data_id_fk",
+ "tableFrom": "proxmox_node_history",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "proxmox_node_history_id": {
+ "name": "proxmox_node_history_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "proxmox_stats_preferences": {
+ "name": "proxmox_stats_preferences",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "layout": {
+ "name": "layout",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_proxmox_stats_prefs_user_host": {
+ "name": "idx_proxmox_stats_prefs_user_host",
+ "columns": [
+ "user_id",
+ "host_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "proxmox_stats_preferences_user_id_users_id_fk": {
+ "name": "proxmox_stats_preferences_user_id_users_id_fk",
+ "tableFrom": "proxmox_stats_preferences",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "proxmox_stats_preferences_host_id_ssh_data_id_fk": {
+ "name": "proxmox_stats_preferences_host_id_ssh_data_id_fk",
+ "tableFrom": "proxmox_stats_preferences",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "proxmox_stats_preferences_id": {
+ "name": "proxmox_stats_preferences_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "rbac_applied_defaults": {
+ "name": "rbac_applied_defaults",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "role_name": {
+ "name": "role_name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "permission": {
+ "name": "permission",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "applied_at": {
+ "name": "applied_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_rbac_applied_defaults_role_permission": {
+ "name": "idx_rbac_applied_defaults_role_permission",
+ "columns": [
+ "role_name",
+ "permission"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {},
+ "compositePrimaryKeys": {
+ "rbac_applied_defaults_id": {
+ "name": "rbac_applied_defaults_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "rbac_known_permissions": {
+ "name": "rbac_known_permissions",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "permission": {
+ "name": "permission",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "first_seen_at": {
+ "name": "first_seen_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_rbac_known_permissions_permission": {
+ "name": "idx_rbac_known_permissions_permission",
+ "columns": [
+ "permission"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {},
+ "compositePrimaryKeys": {
+ "rbac_known_permissions_id": {
+ "name": "rbac_known_permissions_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "recent_activity": {
+ "name": "recent_activity",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "type": {
+ "name": "type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_name": {
+ "name": "host_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "timestamp": {
+ "name": "timestamp",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_recent_activity_user_ts": {
+ "name": "idx_recent_activity_user_ts",
+ "columns": [
+ "user_id",
+ "timestamp"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "recent_activity_user_id_users_id_fk": {
+ "name": "recent_activity_user_id_users_id_fk",
+ "tableFrom": "recent_activity",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "recent_activity_host_id_ssh_data_id_fk": {
+ "name": "recent_activity_host_id_ssh_data_id_fk",
+ "tableFrom": "recent_activity",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "recent_activity_id": {
+ "name": "recent_activity_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "roles": {
+ "name": "roles",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "display_name": {
+ "name": "display_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "is_system": {
+ "name": "is_system",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "permissions": {
+ "name": "permissions",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {},
+ "compositePrimaryKeys": {
+ "roles_id": {
+ "name": "roles_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {
+ "roles_name_unique": {
+ "name": "roles_name_unique",
+ "columns": [
+ "name"
+ ]
+ }
+ },
+ "checkConstraint": {}
+ },
+ "secret_sources": {
+ "name": "secret_sources",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "kind": {
+ "name": "kind",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('onepassword-connect')"
+ },
+ "base_url": {
+ "name": "base_url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "token": {
+ "name": "token",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "shared": {
+ "name": "shared",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_secret_sources_user": {
+ "name": "idx_secret_sources_user",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "secret_sources_user_id_users_id_fk": {
+ "name": "secret_sources_user_id_users_id_fk",
+ "tableFrom": "secret_sources",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "secret_sources_id": {
+ "name": "secret_sources_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "session_recordings": {
+ "name": "session_recordings",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "username": {
+ "name": "username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "access_id": {
+ "name": "access_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "started_at": {
+ "name": "started_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "ended_at": {
+ "name": "ended_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "duration": {
+ "name": "duration",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "commands": {
+ "name": "commands",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "dangerous_actions": {
+ "name": "dangerous_actions",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "recording_path": {
+ "name": "recording_path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "protocol": {
+ "name": "protocol",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'ssh'"
+ },
+ "format": {
+ "name": "format",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('text')"
+ },
+ "terminated_by_owner": {
+ "name": "terminated_by_owner",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false,
+ "default": false
+ },
+ "termination_reason": {
+ "name": "termination_reason",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {
+ "idx_session_recordings_user_started": {
+ "name": "idx_session_recordings_user_started",
+ "columns": [
+ "user_id",
+ "started_at"
+ ],
+ "isUnique": false
+ },
+ "idx_session_recordings_host": {
+ "name": "idx_session_recordings_host",
+ "columns": [
+ "host_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "session_recordings_host_id_ssh_data_id_fk": {
+ "name": "session_recordings_host_id_ssh_data_id_fk",
+ "tableFrom": "session_recordings",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "session_recordings_user_id_users_id_fk": {
+ "name": "session_recordings_user_id_users_id_fk",
+ "tableFrom": "session_recordings",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "session_recordings_access_id_host_access_id_fk": {
+ "name": "session_recordings_access_id_host_access_id_fk",
+ "tableFrom": "session_recordings",
+ "tableTo": "host_access",
+ "columnsFrom": [
+ "access_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "session_recordings_id": {
+ "name": "session_recordings_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "session_share_participants": {
+ "name": "session_share_participants",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "share_id": {
+ "name": "share_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "guest_label": {
+ "name": "guest_label",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "joined_at": {
+ "name": "joined_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "left_at": {
+ "name": "left_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "session_share_participants_share_id_session_shares_id_fk": {
+ "name": "session_share_participants_share_id_session_shares_id_fk",
+ "tableFrom": "session_share_participants",
+ "tableTo": "session_shares",
+ "columnsFrom": [
+ "share_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "session_share_participants_user_id_users_id_fk": {
+ "name": "session_share_participants_user_id_users_id_fk",
+ "tableFrom": "session_share_participants",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "session_share_participants_id": {
+ "name": "session_share_participants_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "session_shares": {
+ "name": "session_shares",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "owner_user_id": {
+ "name": "owner_user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "protocol": {
+ "name": "protocol",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "session_id": {
+ "name": "session_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "tab_instance_id": {
+ "name": "tab_instance_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "share_type": {
+ "name": "share_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "target_user_id": {
+ "name": "target_user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "link_token": {
+ "name": "link_token",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "permission_level": {
+ "name": "permission_level",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('read-only')"
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "revoked_at": {
+ "name": "revoked_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "last_joined_at": {
+ "name": "last_joined_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "join_count": {
+ "name": "join_count",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 0
+ }
+ },
+ "indexes": {
+ "idx_session_shares_session_id": {
+ "name": "idx_session_shares_session_id",
+ "columns": [
+ "session_id"
+ ],
+ "isUnique": false
+ },
+ "idx_session_shares_host_id": {
+ "name": "idx_session_shares_host_id",
+ "columns": [
+ "host_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "session_shares_host_id_ssh_data_id_fk": {
+ "name": "session_shares_host_id_ssh_data_id_fk",
+ "tableFrom": "session_shares",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "session_shares_owner_user_id_users_id_fk": {
+ "name": "session_shares_owner_user_id_users_id_fk",
+ "tableFrom": "session_shares",
+ "tableTo": "users",
+ "columnsFrom": [
+ "owner_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "session_shares_target_user_id_users_id_fk": {
+ "name": "session_shares_target_user_id_users_id_fk",
+ "tableFrom": "session_shares",
+ "tableTo": "users",
+ "columnsFrom": [
+ "target_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "session_shares_id": {
+ "name": "session_shares_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {
+ "session_shares_link_token_unique": {
+ "name": "session_shares_link_token_unique",
+ "columns": [
+ "link_token"
+ ]
+ }
+ },
+ "checkConstraint": {}
+ },
+ "sessions": {
+ "name": "sessions",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "jwt_token": {
+ "name": "jwt_token",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "device_type": {
+ "name": "device_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "device_info": {
+ "name": "device_info",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "oidc_sub": {
+ "name": "oidc_sub",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "oidc_sid": {
+ "name": "oidc_sid",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "sso_provider_id": {
+ "name": "sso_provider_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "last_active_at": {
+ "name": "last_active_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_sessions_user_id": {
+ "name": "idx_sessions_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ },
+ "idx_sessions_expires_at": {
+ "name": "idx_sessions_expires_at",
+ "columns": [
+ "expires_at"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "sessions_user_id_users_id_fk": {
+ "name": "sessions_user_id_users_id_fk",
+ "tableFrom": "sessions",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "sessions_id": {
+ "name": "sessions_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "settings": {
+ "name": "settings",
+ "columns": {
+ "key": {
+ "name": "key",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "value": {
+ "name": "value",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {},
+ "compositePrimaryKeys": {
+ "settings_key": {
+ "name": "settings_key",
+ "columns": [
+ "key"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "shared_credential_secrets": {
+ "name": "shared_credential_secrets",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "credential_access_id": {
+ "name": "credential_access_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "target_user_id": {
+ "name": "target_user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "encrypted_username": {
+ "name": "encrypted_username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "auth_type": {
+ "name": "auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('password')"
+ },
+ "encrypted_password": {
+ "name": "encrypted_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "encrypted_key": {
+ "name": "encrypted_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "encrypted_key_password": {
+ "name": "encrypted_key_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "key_type": {
+ "name": "key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "public_key": {
+ "name": "public_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "cert_public_key": {
+ "name": "cert_public_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_shared_credential_secrets_scope": {
+ "name": "idx_shared_credential_secrets_scope",
+ "columns": [
+ "credential_access_id",
+ "target_user_id"
+ ],
+ "isUnique": true
+ },
+ "idx_shared_credential_secrets_target": {
+ "name": "idx_shared_credential_secrets_target",
+ "columns": [
+ "target_user_id",
+ "credential_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "shared_credential_secrets_target_user_id_users_id_fk": {
+ "name": "shared_credential_secrets_target_user_id_users_id_fk",
+ "tableFrom": "shared_credential_secrets",
+ "tableTo": "users",
+ "columnsFrom": [
+ "target_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "shared_credential_secrets_credential_id_ssh_credentials_id_fk": {
+ "name": "shared_credential_secrets_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "shared_credential_secrets",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "shared_cred_secrets_access_id_fk": {
+ "name": "shared_cred_secrets_access_id_fk",
+ "tableFrom": "shared_credential_secrets",
+ "tableTo": "credential_access",
+ "columnsFrom": [
+ "credential_access_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "shared_credential_secrets_id": {
+ "name": "shared_credential_secrets_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "shared_host_auth_overrides": {
+ "name": "shared_host_auth_overrides",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "protocol": {
+ "name": "protocol",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'ssh'"
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "shared_host_auth_overrides_host_user_protocol_unique": {
+ "name": "shared_host_auth_overrides_host_user_protocol_unique",
+ "columns": [
+ "host_id",
+ "user_id",
+ "protocol"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "shared_host_auth_overrides_host_id_ssh_data_id_fk": {
+ "name": "shared_host_auth_overrides_host_id_ssh_data_id_fk",
+ "tableFrom": "shared_host_auth_overrides",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "shared_host_auth_overrides_user_id_users_id_fk": {
+ "name": "shared_host_auth_overrides_user_id_users_id_fk",
+ "tableFrom": "shared_host_auth_overrides",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk": {
+ "name": "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "shared_host_auth_overrides",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "shared_host_auth_overrides_id": {
+ "name": "shared_host_auth_overrides_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "shared_host_secrets": {
+ "name": "shared_host_secrets",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "host_access_id": {
+ "name": "host_access_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "target_user_id": {
+ "name": "target_user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "protocol": {
+ "name": "protocol",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'ssh'"
+ },
+ "source_type": {
+ "name": "source_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('credential')"
+ },
+ "original_credential_id": {
+ "name": "original_credential_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "encrypted_username": {
+ "name": "encrypted_username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "encrypted_auth_type": {
+ "name": "encrypted_auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "encrypted_password": {
+ "name": "encrypted_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "encrypted_key": {
+ "name": "encrypted_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "encrypted_key_password": {
+ "name": "encrypted_key_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "encrypted_key_type": {
+ "name": "encrypted_key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "encrypted_domain": {
+ "name": "encrypted_domain",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_shared_host_secrets_scope": {
+ "name": "idx_shared_host_secrets_scope",
+ "columns": [
+ "host_access_id",
+ "target_user_id",
+ "protocol"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "shared_host_secrets_host_access_id_host_access_id_fk": {
+ "name": "shared_host_secrets_host_access_id_host_access_id_fk",
+ "tableFrom": "shared_host_secrets",
+ "tableTo": "host_access",
+ "columnsFrom": [
+ "host_access_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "shared_host_secrets_target_user_id_users_id_fk": {
+ "name": "shared_host_secrets_target_user_id_users_id_fk",
+ "tableFrom": "shared_host_secrets",
+ "tableTo": "users",
+ "columnsFrom": [
+ "target_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "shared_host_secrets_original_credential_id_ssh_credentials_id_fk": {
+ "name": "shared_host_secrets_original_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "shared_host_secrets",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "original_credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "shared_host_secrets_id": {
+ "name": "shared_host_secrets_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "snippet_access": {
+ "name": "snippet_access",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "snippet_id": {
+ "name": "snippet_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "role_id": {
+ "name": "role_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "granted_by": {
+ "name": "granted_by",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "permission_level": {
+ "name": "permission_level",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('view')"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_snippet_access_user_id": {
+ "name": "idx_snippet_access_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ },
+ "idx_snippet_access_snippet_id": {
+ "name": "idx_snippet_access_snippet_id",
+ "columns": [
+ "snippet_id"
+ ],
+ "isUnique": false
+ },
+ "idx_snippet_access_role_id": {
+ "name": "idx_snippet_access_role_id",
+ "columns": [
+ "role_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "snippet_access_snippet_id_snippets_id_fk": {
+ "name": "snippet_access_snippet_id_snippets_id_fk",
+ "tableFrom": "snippet_access",
+ "tableTo": "snippets",
+ "columnsFrom": [
+ "snippet_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "snippet_access_user_id_users_id_fk": {
+ "name": "snippet_access_user_id_users_id_fk",
+ "tableFrom": "snippet_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "snippet_access_role_id_roles_id_fk": {
+ "name": "snippet_access_role_id_roles_id_fk",
+ "tableFrom": "snippet_access",
+ "tableTo": "roles",
+ "columnsFrom": [
+ "role_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "snippet_access_granted_by_users_id_fk": {
+ "name": "snippet_access_granted_by_users_id_fk",
+ "tableFrom": "snippet_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "granted_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "snippet_access_id": {
+ "name": "snippet_access_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "snippet_folders": {
+ "name": "snippet_folders",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "color": {
+ "name": "color",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "icon": {
+ "name": "icon",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "snippet_folders_user_id_users_id_fk": {
+ "name": "snippet_folders_user_id_users_id_fk",
+ "tableFrom": "snippet_folders",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "snippet_folders_id": {
+ "name": "snippet_folders_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {
+ "snippet_folders_sync_id_unique": {
+ "name": "snippet_folders_sync_id_unique",
+ "columns": [
+ "sync_id"
+ ]
+ }
+ },
+ "checkConstraint": {}
+ },
+ "snippets": {
+ "name": "snippets",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "content": {
+ "name": "content",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "folder": {
+ "name": "folder",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "order": {
+ "name": "order",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 0
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "host_filter": {
+ "name": "host_filter",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "is_note": {
+ "name": "is_note",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ }
+ },
+ "indexes": {
+ "idx_snippets_user_id": {
+ "name": "idx_snippets_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "snippets_user_id_users_id_fk": {
+ "name": "snippets_user_id_users_id_fk",
+ "tableFrom": "snippets",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "snippets_id": {
+ "name": "snippets_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {
+ "snippets_sync_id_unique": {
+ "name": "snippets_sync_id_unique",
+ "columns": [
+ "sync_id"
+ ]
+ }
+ },
+ "checkConstraint": {}
+ },
+ "ssh_credential_usage": {
+ "name": "ssh_credential_usage",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "used_at": {
+ "name": "used_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_ssh_credential_usage_credential": {
+ "name": "idx_ssh_credential_usage_credential",
+ "columns": [
+ "credential_id"
+ ],
+ "isUnique": false
+ },
+ "idx_ssh_credential_usage_user": {
+ "name": "idx_ssh_credential_usage_user",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "ssh_credential_usage_credential_id_ssh_credentials_id_fk": {
+ "name": "ssh_credential_usage_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "ssh_credential_usage",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "ssh_credential_usage_host_id_ssh_data_id_fk": {
+ "name": "ssh_credential_usage_host_id_ssh_data_id_fk",
+ "tableFrom": "ssh_credential_usage",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "ssh_credential_usage_user_id_users_id_fk": {
+ "name": "ssh_credential_usage_user_id_users_id_fk",
+ "tableFrom": "ssh_credential_usage",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "ssh_credential_usage_id": {
+ "name": "ssh_credential_usage_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "ssh_credentials": {
+ "name": "ssh_credentials",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "folder": {
+ "name": "folder",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "tags": {
+ "name": "tags",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "pin": {
+ "name": "pin",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "sort_order": {
+ "name": "sort_order",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "auth_type": {
+ "name": "auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "username": {
+ "name": "username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "password": {
+ "name": "password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "key": {
+ "name": "key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "private_key": {
+ "name": "private_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "public_key": {
+ "name": "public_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "key_password": {
+ "name": "key_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "key_type": {
+ "name": "key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "detected_key_type": {
+ "name": "detected_key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "cert_public_key": {
+ "name": "cert_public_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "usage_count": {
+ "name": "usage_count",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 0
+ },
+ "last_used": {
+ "name": "last_used",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_ssh_credentials_user_id": {
+ "name": "idx_ssh_credentials_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "ssh_credentials_user_id_users_id_fk": {
+ "name": "ssh_credentials_user_id_users_id_fk",
+ "tableFrom": "ssh_credentials",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "ssh_credentials_id": {
+ "name": "ssh_credentials_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {
+ "ssh_credentials_sync_id_unique": {
+ "name": "ssh_credentials_sync_id_unique",
+ "columns": [
+ "sync_id"
+ ]
+ }
+ },
+ "checkConstraint": {}
+ },
+ "ssh_folders": {
+ "name": "ssh_folders",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "color": {
+ "name": "color",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "icon": {
+ "name": "icon",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "sort_order": {
+ "name": "sort_order",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_ssh_folders_user_id": {
+ "name": "idx_ssh_folders_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "ssh_folders_user_id_users_id_fk": {
+ "name": "ssh_folders_user_id_users_id_fk",
+ "tableFrom": "ssh_folders",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "ssh_folders_credential_id_ssh_credentials_id_fk": {
+ "name": "ssh_folders_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "ssh_folders",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "ssh_folders_id": {
+ "name": "ssh_folders_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {
+ "ssh_folders_sync_id_unique": {
+ "name": "ssh_folders_sync_id_unique",
+ "columns": [
+ "sync_id"
+ ]
+ }
+ },
+ "checkConstraint": {}
+ },
+ "sso_providers": {
+ "name": "sso_providers",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "type": {
+ "name": "type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "enabled": {
+ "name": "enabled",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "display_order": {
+ "name": "display_order",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 0
+ },
+ "config": {
+ "name": "config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {},
+ "compositePrimaryKeys": {
+ "sso_providers_id": {
+ "name": "sso_providers_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "sync_tombstones": {
+ "name": "sync_tombstones",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "entity_type": {
+ "name": "entity_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "deleted_at": {
+ "name": "deleted_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "sync_tombstones_user_id_users_id_fk": {
+ "name": "sync_tombstones_user_id_users_id_fk",
+ "tableFrom": "sync_tombstones",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "sync_tombstones_id": {
+ "name": "sync_tombstones_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "termix_identities": {
+ "name": "termix_identities",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "handle": {
+ "name": "handle",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "termix_identities_user_id_users_id_fk": {
+ "name": "termix_identities_user_id_users_id_fk",
+ "tableFrom": "termix_identities",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "termix_identities_id": {
+ "name": "termix_identities_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {
+ "termix_identities_user_id_unique": {
+ "name": "termix_identities_user_id_unique",
+ "columns": [
+ "user_id"
+ ]
+ },
+ "termix_identities_handle_unique": {
+ "name": "termix_identities_handle_unique",
+ "columns": [
+ "handle"
+ ]
+ }
+ },
+ "checkConstraint": {}
+ },
+ "termix_identity_ca": {
+ "name": "termix_identity_ca",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "identity_id": {
+ "name": "identity_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "public_key": {
+ "name": "public_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "private_key": {
+ "name": "private_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "validity_days": {
+ "name": "validity_days",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 90
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "termix_identity_ca_identity_id_termix_identities_id_fk": {
+ "name": "termix_identity_ca_identity_id_termix_identities_id_fk",
+ "tableFrom": "termix_identity_ca",
+ "tableTo": "termix_identities",
+ "columnsFrom": [
+ "identity_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "termix_identity_ca_user_id_users_id_fk": {
+ "name": "termix_identity_ca_user_id_users_id_fk",
+ "tableFrom": "termix_identity_ca",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "termix_identity_ca_id": {
+ "name": "termix_identity_ca_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {
+ "termix_identity_ca_identity_id_unique": {
+ "name": "termix_identity_ca_identity_id_unique",
+ "columns": [
+ "identity_id"
+ ]
+ }
+ },
+ "checkConstraint": {}
+ },
+ "termix_identity_keys": {
+ "name": "termix_identity_keys",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "identity_id": {
+ "name": "identity_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "public_key": {
+ "name": "public_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "key_type": {
+ "name": "key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "algorithm": {
+ "name": "algorithm",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "label": {
+ "name": "label",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "comment": {
+ "name": "comment",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "source": {
+ "name": "source",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('manual')"
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "enabled": {
+ "name": "enabled",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "termix_identity_keys_identity_id_termix_identities_id_fk": {
+ "name": "termix_identity_keys_identity_id_termix_identities_id_fk",
+ "tableFrom": "termix_identity_keys",
+ "tableTo": "termix_identities",
+ "columnsFrom": [
+ "identity_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "termix_identity_keys_user_id_users_id_fk": {
+ "name": "termix_identity_keys_user_id_users_id_fk",
+ "tableFrom": "termix_identity_keys",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "termix_identity_keys_credential_id_ssh_credentials_id_fk": {
+ "name": "termix_identity_keys_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "termix_identity_keys",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "termix_identity_keys_id": {
+ "name": "termix_identity_keys_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "tmux_session_tags": {
+ "name": "tmux_session_tags",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "session_name": {
+ "name": "session_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "tag": {
+ "name": "tag",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "tmux_session_tags_user_id_users_id_fk": {
+ "name": "tmux_session_tags_user_id_users_id_fk",
+ "tableFrom": "tmux_session_tags",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "tmux_session_tags_host_id_ssh_data_id_fk": {
+ "name": "tmux_session_tags_host_id_ssh_data_id_fk",
+ "tableFrom": "tmux_session_tags",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "tmux_session_tags_id": {
+ "name": "tmux_session_tags_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "transfer_recent": {
+ "name": "transfer_recent",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "source_host_id": {
+ "name": "source_host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "dest_host_id": {
+ "name": "dest_host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "dest_path": {
+ "name": "dest_path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "dest_path_label": {
+ "name": "dest_path_label",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "last_used": {
+ "name": "last_used",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_transfer_recent_user": {
+ "name": "idx_transfer_recent_user",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "transfer_recent_user_id_users_id_fk": {
+ "name": "transfer_recent_user_id_users_id_fk",
+ "tableFrom": "transfer_recent",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "transfer_recent_source_host_id_ssh_data_id_fk": {
+ "name": "transfer_recent_source_host_id_ssh_data_id_fk",
+ "tableFrom": "transfer_recent",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "source_host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "transfer_recent_dest_host_id_ssh_data_id_fk": {
+ "name": "transfer_recent_dest_host_id_ssh_data_id_fk",
+ "tableFrom": "transfer_recent",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "dest_host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "transfer_recent_id": {
+ "name": "transfer_recent_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "trusted_devices": {
+ "name": "trusted_devices",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "device_fingerprint": {
+ "name": "device_fingerprint",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "device_type": {
+ "name": "device_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "device_info": {
+ "name": "device_info",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "last_used_at": {
+ "name": "last_used_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_trusted_devices_user_id": {
+ "name": "idx_trusted_devices_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "trusted_devices_user_id_users_id_fk": {
+ "name": "trusted_devices_user_id_users_id_fk",
+ "tableFrom": "trusted_devices",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "trusted_devices_id": {
+ "name": "trusted_devices_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "ui_preferences": {
+ "name": "ui_preferences",
+ "columns": {
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "data": {
+ "name": "data",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "ui_preferences_user_id_users_id_fk": {
+ "name": "ui_preferences_user_id_users_id_fk",
+ "tableFrom": "ui_preferences",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "ui_preferences_user_id": {
+ "name": "ui_preferences_user_id",
+ "columns": [
+ "user_id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "user_external_identities": {
+ "name": "user_external_identities",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "provider_id": {
+ "name": "provider_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "subject": {
+ "name": "subject",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "email": {
+ "name": "email",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_user_external_identities_provider_subject": {
+ "name": "idx_user_external_identities_provider_subject",
+ "columns": [
+ "provider_id",
+ "subject"
+ ],
+ "isUnique": true
+ },
+ "idx_user_external_identities_user": {
+ "name": "idx_user_external_identities_user",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "user_external_identities_user_id_users_id_fk": {
+ "name": "user_external_identities_user_id_users_id_fk",
+ "tableFrom": "user_external_identities",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "user_external_identities_id": {
+ "name": "user_external_identities_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "user_open_tabs": {
+ "name": "user_open_tabs",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "tab_type": {
+ "name": "tab_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "label": {
+ "name": "label",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "tab_order": {
+ "name": "tab_order",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 0
+ },
+ "backend_session_id": {
+ "name": "backend_session_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_user_open_tabs_user_id": {
+ "name": "idx_user_open_tabs_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "user_open_tabs_user_id_users_id_fk": {
+ "name": "user_open_tabs_user_id_users_id_fk",
+ "tableFrom": "user_open_tabs",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "user_open_tabs_host_id_ssh_data_id_fk": {
+ "name": "user_open_tabs_host_id_ssh_data_id_fk",
+ "tableFrom": "user_open_tabs",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "user_open_tabs_id": {
+ "name": "user_open_tabs_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "user_preferences": {
+ "name": "user_preferences",
+ "columns": {
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "reopen_tabs_on_login": {
+ "name": "reopen_tabs_on_login",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "theme": {
+ "name": "theme",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "font_size": {
+ "name": "font_size",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "accent_color": {
+ "name": "accent_color",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "language": {
+ "name": "language",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "storage_mode": {
+ "name": "storage_mode",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "command_autocomplete": {
+ "name": "command_autocomplete",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "command_palette_enabled": {
+ "name": "command_palette_enabled",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "show_host_tags": {
+ "name": "show_host_tags",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "host_tray_on_click": {
+ "name": "host_tray_on_click",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "pin_app_rail": {
+ "name": "pin_app_rail",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "expand_app_rail_on_hover": {
+ "name": "expand_app_rail_on_hover",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "show_pin_app_rail_button": {
+ "name": "show_pin_app_rail_button",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "folders_collapsed": {
+ "name": "folders_collapsed",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "confirm_snippet_execution": {
+ "name": "confirm_snippet_execution",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "disable_update_check": {
+ "name": "disable_update_check",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "confirm_tab_close": {
+ "name": "confirm_tab_close",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "hidden_rail_tabs": {
+ "name": "hidden_rail_tabs",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "ai_assistant_enabled": {
+ "name": "ai_assistant_enabled",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "ai_read_only_commands": {
+ "name": "ai_read_only_commands",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "compact_host_view": {
+ "name": "compact_host_view",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "status_color_scheme": {
+ "name": "status_color_scheme",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "custom_themes": {
+ "name": "custom_themes",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "custom_keybindings": {
+ "name": "custom_keybindings",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "terminal_defaults": {
+ "name": "terminal_defaults",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "rdp_defaults": {
+ "name": "rdp_defaults",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "terminal_macros": {
+ "name": "terminal_macros",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "user_preferences_user_id_users_id_fk": {
+ "name": "user_preferences_user_id_users_id_fk",
+ "tableFrom": "user_preferences",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "user_preferences_user_id": {
+ "name": "user_preferences_user_id",
+ "columns": [
+ "user_id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "user_roles": {
+ "name": "user_roles",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "role_id": {
+ "name": "role_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "granted_by": {
+ "name": "granted_by",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "granted_at": {
+ "name": "granted_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_user_roles_user_role": {
+ "name": "idx_user_roles_user_role",
+ "columns": [
+ "user_id",
+ "role_id"
+ ],
+ "isUnique": true
+ },
+ "idx_user_roles_role_id": {
+ "name": "idx_user_roles_role_id",
+ "columns": [
+ "role_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "user_roles_user_id_users_id_fk": {
+ "name": "user_roles_user_id_users_id_fk",
+ "tableFrom": "user_roles",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "user_roles_role_id_roles_id_fk": {
+ "name": "user_roles_role_id_roles_id_fk",
+ "tableFrom": "user_roles",
+ "tableTo": "roles",
+ "columnsFrom": [
+ "role_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "user_roles_granted_by_users_id_fk": {
+ "name": "user_roles_granted_by_users_id_fk",
+ "tableFrom": "user_roles",
+ "tableTo": "users",
+ "columnsFrom": [
+ "granted_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "user_roles_id": {
+ "name": "user_roles_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "user_second_factors": {
+ "name": "user_second_factors",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "factor_id": {
+ "name": "factor_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "enrolled_at": {
+ "name": "enrolled_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {
+ "idx_user_second_factors_user_factor": {
+ "name": "idx_user_second_factors_user_factor",
+ "columns": [
+ "user_id",
+ "plugin_id",
+ "factor_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "user_second_factors_user_id_users_id_fk": {
+ "name": "user_second_factors_user_id_users_id_fk",
+ "tableFrom": "user_second_factors",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "user_second_factors_id": {
+ "name": "user_second_factors_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "user_workspaces": {
+ "name": "user_workspaces",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "color": {
+ "name": "color",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "icon": {
+ "name": "icon",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "kind": {
+ "name": "kind",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('manual')"
+ },
+ "is_default": {
+ "name": "is_default",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "payload": {
+ "name": "payload",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('{}')"
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "last_used_at": {
+ "name": "last_used_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {
+ "idx_user_workspaces_user_id": {
+ "name": "idx_user_workspaces_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "user_workspaces_user_id_users_id_fk": {
+ "name": "user_workspaces_user_id_users_id_fk",
+ "tableFrom": "user_workspaces",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "user_workspaces_id": {
+ "name": "user_workspaces_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {
+ "user_workspaces_sync_id_unique": {
+ "name": "user_workspaces_sync_id_unique",
+ "columns": [
+ "sync_id"
+ ]
+ }
+ },
+ "checkConstraint": {}
+ },
+ "users": {
+ "name": "users",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "username": {
+ "name": "username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "password_hash": {
+ "name": "password_hash",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "is_admin": {
+ "name": "is_admin",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "is_oidc": {
+ "name": "is_oidc",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "oidc_identifier": {
+ "name": "oidc_identifier",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "sso_provider_id": {
+ "name": "sso_provider_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "client_id": {
+ "name": "client_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "client_secret": {
+ "name": "client_secret",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "issuer_url": {
+ "name": "issuer_url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "authorization_url": {
+ "name": "authorization_url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "token_url": {
+ "name": "token_url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "identifier_path": {
+ "name": "identifier_path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "name_path": {
+ "name": "name_path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "scopes": {
+ "name": "scopes",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false,
+ "default": "('openid email profile')"
+ },
+ "totp_secret": {
+ "name": "totp_secret",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "totp_enabled": {
+ "name": "totp_enabled",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "totp_backup_codes": {
+ "name": "totp_backup_codes",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "registered_at": {
+ "name": "registered_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "donation_modal_dismissed": {
+ "name": "donation_modal_dismissed",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {},
+ "compositePrimaryKeys": {
+ "users_id": {
+ "name": "users_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "vault_profiles": {
+ "name": "vault_profiles",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "folder": {
+ "name": "folder",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "tags": {
+ "name": "tags",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "vault_addr": {
+ "name": "vault_addr",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "vault_namespace": {
+ "name": "vault_namespace",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "oidc_mount": {
+ "name": "oidc_mount",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "oidc_role": {
+ "name": "oidc_role",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "ssh_mount": {
+ "name": "ssh_mount",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "ssh_role": {
+ "name": "ssh_role",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "valid_principals": {
+ "name": "valid_principals",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "key_type": {
+ "name": "key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "shared": {
+ "name": "shared",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "vault_profiles_user_id_users_id_fk": {
+ "name": "vault_profiles_user_id_users_id_fk",
+ "tableFrom": "vault_profiles",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "vault_profiles_id": {
+ "name": "vault_profiles_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {
+ "vault_profiles_sync_id_unique": {
+ "name": "vault_profiles_sync_id_unique",
+ "columns": [
+ "sync_id"
+ ]
+ }
+ },
+ "checkConstraint": {}
+ },
+ "vault_tokens": {
+ "name": "vault_tokens",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "profile_id": {
+ "name": "profile_id",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "ssh_cert": {
+ "name": "ssh_cert",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "private_key": {
+ "name": "private_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "last_used": {
+ "name": "last_used",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {
+ "idx_vault_tokens_user_profile": {
+ "name": "idx_vault_tokens_user_profile",
+ "columns": [
+ "user_id",
+ "profile_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "vault_tokens_user_id_users_id_fk": {
+ "name": "vault_tokens_user_id_users_id_fk",
+ "tableFrom": "vault_tokens",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "vault_tokens_profile_id_vault_profiles_id_fk": {
+ "name": "vault_tokens_profile_id_vault_profiles_id_fk",
+ "tableFrom": "vault_tokens",
+ "tableTo": "vault_profiles",
+ "columnsFrom": [
+ "profile_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "vault_tokens_id": {
+ "name": "vault_tokens_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ },
+ "webauthn_credentials": {
+ "name": "webauthn_credentials",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "public_key": {
+ "name": "public_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "counter": {
+ "name": "counter",
+ "type": "int",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 0
+ },
+ "device_type": {
+ "name": "device_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "backed_up": {
+ "name": "backed_up",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "transports": {
+ "name": "transports",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "user_verification": {
+ "name": "user_verification",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "('preferred')"
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "(CURRENT_TIMESTAMP)"
+ },
+ "last_used_at": {
+ "name": "last_used_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "webauthn_credentials_user_id_users_id_fk": {
+ "name": "webauthn_credentials_user_id_users_id_fk",
+ "tableFrom": "webauthn_credentials",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {
+ "webauthn_credentials_id": {
+ "name": "webauthn_credentials_id",
+ "columns": [
+ "id"
+ ]
+ }
+ },
+ "uniqueConstraints": {},
+ "checkConstraint": {}
+ }
+ },
+ "views": {},
+ "_meta": {
+ "schemas": {},
+ "tables": {},
+ "columns": {}
+ },
+ "internal": {
+ "tables": {},
+ "indexes": {}
+ }
+}
\ No newline at end of file
diff --git a/drizzle/mysql/meta/_journal.json b/drizzle/mysql/meta/_journal.json
index 17a59fb5f..5f7615fc3 100644
--- a/drizzle/mysql/meta/_journal.json
+++ b/drizzle/mysql/meta/_journal.json
@@ -211,6 +211,13 @@
"when": 1790118361160,
"tag": "0029_open_captain_america",
"breakpoints": true
+ },
+ {
+ "idx": 30,
+ "version": "5",
+ "when": 1790135163718,
+ "tag": "0030_sweet_warlock",
+ "breakpoints": true
}
]
}
\ No newline at end of file
diff --git a/drizzle/postgres/0031_nifty_sentry.sql b/drizzle/postgres/0031_nifty_sentry.sql
new file mode 100644
index 000000000..2983e460b
--- /dev/null
+++ b/drizzle/postgres/0031_nifty_sentry.sql
@@ -0,0 +1,22 @@
+CREATE TABLE "user_external_identities" (
+ "id" serial PRIMARY KEY NOT NULL,
+ "user_id" varchar(255) NOT NULL,
+ "provider_id" varchar(255) NOT NULL,
+ "subject" varchar(255) NOT NULL,
+ "email" text,
+ "created_at" varchar(255) DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "user_second_factors" (
+ "id" serial PRIMARY KEY NOT NULL,
+ "user_id" varchar(255) NOT NULL,
+ "plugin_id" varchar(255) NOT NULL,
+ "factor_id" varchar(255) NOT NULL,
+ "enrolled_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+ALTER TABLE "user_external_identities" ADD CONSTRAINT "user_external_identities_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "user_second_factors" ADD CONSTRAINT "user_second_factors_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "idx_user_external_identities_provider_subject" ON "user_external_identities" USING btree ("provider_id","subject");--> statement-breakpoint
+CREATE INDEX "idx_user_external_identities_user" ON "user_external_identities" USING btree ("user_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "idx_user_second_factors_user_factor" ON "user_second_factors" USING btree ("user_id","plugin_id","factor_id");
\ No newline at end of file
diff --git a/drizzle/postgres/meta/0031_snapshot.json b/drizzle/postgres/meta/0031_snapshot.json
new file mode 100644
index 000000000..b25f32407
--- /dev/null
+++ b/drizzle/postgres/meta/0031_snapshot.json
@@ -0,0 +1,9994 @@
+{
+ "id": "d742a01a-6bdb-4dc0-9c65-55845d2ed374",
+ "prevId": "cddffc1f-93b9-4d09-ab23-85160ff82a47",
+ "version": "7",
+ "dialect": "postgresql",
+ "tables": {
+ "public.ai_conversations": {
+ "name": "ai_conversations",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "title": {
+ "name": "title",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "provider_id": {
+ "name": "provider_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "model": {
+ "name": "model",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_ai_conversations_user": {
+ "name": "idx_ai_conversations_user",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "updated_at",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "ai_conversations_user_id_users_id_fk": {
+ "name": "ai_conversations_user_id_users_id_fk",
+ "tableFrom": "ai_conversations",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.ai_messages": {
+ "name": "ai_messages",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "conversation_id": {
+ "name": "conversation_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "role": {
+ "name": "role",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "content": {
+ "name": "content",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "''"
+ },
+ "tool_calls": {
+ "name": "tool_calls",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_ai_messages_conversation": {
+ "name": "idx_ai_messages_conversation",
+ "columns": [
+ {
+ "expression": "conversation_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "created_at",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "ai_messages_conversation_id_ai_conversations_id_fk": {
+ "name": "ai_messages_conversation_id_ai_conversations_id_fk",
+ "tableFrom": "ai_messages",
+ "tableTo": "ai_conversations",
+ "columnsFrom": [
+ "conversation_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.ai_proposals": {
+ "name": "ai_proposals",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "conversation_id": {
+ "name": "conversation_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "kind": {
+ "name": "kind",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "summary": {
+ "name": "summary",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "payload": {
+ "name": "payload",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'{}'"
+ },
+ "status": {
+ "name": "status",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'pending'"
+ },
+ "applied_at": {
+ "name": "applied_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "result_summary": {
+ "name": "result_summary",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_ai_proposals_user": {
+ "name": "idx_ai_proposals_user",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "status",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_ai_proposals_conversation": {
+ "name": "idx_ai_proposals_conversation",
+ "columns": [
+ {
+ "expression": "conversation_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "ai_proposals_conversation_id_ai_conversations_id_fk": {
+ "name": "ai_proposals_conversation_id_ai_conversations_id_fk",
+ "tableFrom": "ai_proposals",
+ "tableTo": "ai_conversations",
+ "columnsFrom": [
+ "conversation_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "ai_proposals_user_id_users_id_fk": {
+ "name": "ai_proposals_user_id_users_id_fk",
+ "tableFrom": "ai_proposals",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.ai_providers": {
+ "name": "ai_providers",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "provider_type": {
+ "name": "provider_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "label": {
+ "name": "label",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "base_url": {
+ "name": "base_url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "api_key": {
+ "name": "api_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "api_key_prefix": {
+ "name": "api_key_prefix",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "default_model": {
+ "name": "default_model",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "enabled": {
+ "name": "enabled",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": true
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_ai_providers_user_label": {
+ "name": "idx_ai_providers_user_label",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "label",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "ai_providers_user_id_users_id_fk": {
+ "name": "ai_providers_user_id_users_id_fk",
+ "tableFrom": "ai_providers",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.api_keys": {
+ "name": "api_keys",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "token_hash": {
+ "name": "token_hash",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "token_prefix": {
+ "name": "token_prefix",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "last_used_at": {
+ "name": "last_used_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "is_active": {
+ "name": "is_active",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": true
+ }
+ },
+ "indexes": {
+ "idx_api_keys_user_id": {
+ "name": "idx_api_keys_user_id",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "api_keys_user_id_users_id_fk": {
+ "name": "api_keys_user_id_users_id_fk",
+ "tableFrom": "api_keys",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.audit_logs": {
+ "name": "audit_logs",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "username": {
+ "name": "username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "action": {
+ "name": "action",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "resource_type": {
+ "name": "resource_type",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "resource_id": {
+ "name": "resource_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "resource_name": {
+ "name": "resource_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "details": {
+ "name": "details",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "ip_address": {
+ "name": "ip_address",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "user_agent": {
+ "name": "user_agent",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "success": {
+ "name": "success",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "error_message": {
+ "name": "error_message",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "timestamp": {
+ "name": "timestamp",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_audit_logs_timestamp": {
+ "name": "idx_audit_logs_timestamp",
+ "columns": [
+ {
+ "expression": "timestamp",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_audit_logs_user_ts": {
+ "name": "idx_audit_logs_user_ts",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "timestamp",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_audit_logs_action_ts": {
+ "name": "idx_audit_logs_action_ts",
+ "columns": [
+ {
+ "expression": "action",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "timestamp",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_audit_logs_resource_ts": {
+ "name": "idx_audit_logs_resource_ts",
+ "columns": [
+ {
+ "expression": "resource_type",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "timestamp",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "audit_logs_user_id_users_id_fk": {
+ "name": "audit_logs_user_id_users_id_fk",
+ "tableFrom": "audit_logs",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.automation_channels": {
+ "name": "automation_channels",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "automation_id": {
+ "name": "automation_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "channel_id": {
+ "name": "channel_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ }
+ },
+ "indexes": {
+ "idx_automation_channels_pair": {
+ "name": "idx_automation_channels_pair",
+ "columns": [
+ {
+ "expression": "automation_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "channel_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "automation_channels_automation_id_automations_id_fk": {
+ "name": "automation_channels_automation_id_automations_id_fk",
+ "tableFrom": "automation_channels",
+ "tableTo": "automations",
+ "columnsFrom": [
+ "automation_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "automation_channels_channel_id_notification_channels_id_fk": {
+ "name": "automation_channels_channel_id_notification_channels_id_fk",
+ "tableFrom": "automation_channels",
+ "tableTo": "notification_channels",
+ "columnsFrom": [
+ "channel_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.automation_run_steps": {
+ "name": "automation_run_steps",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "run_id": {
+ "name": "run_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "step_index": {
+ "name": "step_index",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "step_id": {
+ "name": "step_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "step_type": {
+ "name": "step_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "status": {
+ "name": "status",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "started_at": {
+ "name": "started_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "finished_at": {
+ "name": "finished_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "output": {
+ "name": "output",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "error": {
+ "name": "error",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "truncated": {
+ "name": "truncated",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ }
+ },
+ "indexes": {
+ "idx_automation_run_steps_run": {
+ "name": "idx_automation_run_steps_run",
+ "columns": [
+ {
+ "expression": "run_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "step_index",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "automation_run_steps_run_id_automation_runs_id_fk": {
+ "name": "automation_run_steps_run_id_automation_runs_id_fk",
+ "tableFrom": "automation_run_steps",
+ "tableTo": "automation_runs",
+ "columnsFrom": [
+ "run_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.automation_runs": {
+ "name": "automation_runs",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "automation_id": {
+ "name": "automation_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "trigger_type": {
+ "name": "trigger_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "trigger_context": {
+ "name": "trigger_context",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "status": {
+ "name": "status",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "started_at": {
+ "name": "started_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "finished_at": {
+ "name": "finished_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "duration_ms": {
+ "name": "duration_ms",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "error": {
+ "name": "error",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "dry_run": {
+ "name": "dry_run",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "parent_run_id": {
+ "name": "parent_run_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ }
+ },
+ "indexes": {
+ "idx_automation_runs_automation": {
+ "name": "idx_automation_runs_automation",
+ "columns": [
+ {
+ "expression": "automation_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "started_at",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_automation_runs_user": {
+ "name": "idx_automation_runs_user",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "started_at",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "automation_runs_automation_id_automations_id_fk": {
+ "name": "automation_runs_automation_id_automations_id_fk",
+ "tableFrom": "automation_runs",
+ "tableTo": "automations",
+ "columnsFrom": [
+ "automation_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "automation_runs_user_id_users_id_fk": {
+ "name": "automation_runs_user_id_users_id_fk",
+ "tableFrom": "automation_runs",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.automation_schedules": {
+ "name": "automation_schedules",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "automation_id": {
+ "name": "automation_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "cron": {
+ "name": "cron",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "interval_seconds": {
+ "name": "interval_seconds",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "timezone": {
+ "name": "timezone",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "next_due_at": {
+ "name": "next_due_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "last_tick_at": {
+ "name": "last_tick_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ }
+ },
+ "indexes": {
+ "idx_automation_schedules_automation": {
+ "name": "idx_automation_schedules_automation",
+ "columns": [
+ {
+ "expression": "automation_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_automation_schedules_due": {
+ "name": "idx_automation_schedules_due",
+ "columns": [
+ {
+ "expression": "next_due_at",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "automation_schedules_automation_id_automations_id_fk": {
+ "name": "automation_schedules_automation_id_automations_id_fk",
+ "tableFrom": "automation_schedules",
+ "tableTo": "automations",
+ "columnsFrom": [
+ "automation_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.automation_trigger_state": {
+ "name": "automation_trigger_state",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "automation_id": {
+ "name": "automation_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "state_key": {
+ "name": "state_key",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "breach_started_at": {
+ "name": "breach_started_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "last_fired_at": {
+ "name": "last_fired_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "last_value": {
+ "name": "last_value",
+ "type": "double precision",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "last_observed_state": {
+ "name": "last_observed_state",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_automation_trigger_state_key": {
+ "name": "idx_automation_trigger_state_key",
+ "columns": [
+ {
+ "expression": "automation_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "state_key",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "automation_trigger_state_automation_id_automations_id_fk": {
+ "name": "automation_trigger_state_automation_id_automations_id_fk",
+ "tableFrom": "automation_trigger_state",
+ "tableTo": "automations",
+ "columnsFrom": [
+ "automation_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.automations": {
+ "name": "automations",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "enabled": {
+ "name": "enabled",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": true
+ },
+ "definition": {
+ "name": "definition",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "definition_version": {
+ "name": "definition_version",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "default": 1
+ },
+ "concurrency_policy": {
+ "name": "concurrency_policy",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'skip'"
+ },
+ "max_run_seconds": {
+ "name": "max_run_seconds",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "default": 300
+ },
+ "dry_run": {
+ "name": "dry_run",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "last_run_at": {
+ "name": "last_run_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "last_run_status": {
+ "name": "last_run_status",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_automations_user": {
+ "name": "idx_automations_user",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "enabled",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "automations_user_id_users_id_fk": {
+ "name": "automations_user_id_users_id_fk",
+ "tableFrom": "automations",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.c2s_tunnel_presets": {
+ "name": "c2s_tunnel_presets",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "config": {
+ "name": "config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "platform": {
+ "name": "platform",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "computer_name": {
+ "name": "computer_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "c2s_tunnel_presets_user_id_users_id_fk": {
+ "name": "c2s_tunnel_presets_user_id_users_id_fk",
+ "tableFrom": "c2s_tunnel_presets",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.collab_room_members": {
+ "name": "collab_room_members",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "room_id": {
+ "name": "room_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "room_role": {
+ "name": "room_role",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'member'"
+ },
+ "added_by": {
+ "name": "added_by",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_collab_room_members_room_user": {
+ "name": "idx_collab_room_members_room_user",
+ "columns": [
+ {
+ "expression": "room_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_collab_room_members_user": {
+ "name": "idx_collab_room_members_user",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "collab_room_members_room_id_collab_rooms_id_fk": {
+ "name": "collab_room_members_room_id_collab_rooms_id_fk",
+ "tableFrom": "collab_room_members",
+ "tableTo": "collab_rooms",
+ "columnsFrom": [
+ "room_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "collab_room_members_user_id_users_id_fk": {
+ "name": "collab_room_members_user_id_users_id_fk",
+ "tableFrom": "collab_room_members",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "collab_room_members_added_by_users_id_fk": {
+ "name": "collab_room_members_added_by_users_id_fk",
+ "tableFrom": "collab_room_members",
+ "tableTo": "users",
+ "columnsFrom": [
+ "added_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.collab_rooms": {
+ "name": "collab_rooms",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "owner_user_id": {
+ "name": "owner_user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "persistent": {
+ "name": "persistent",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "presenter_user_id": {
+ "name": "presenter_user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "stage_protocol": {
+ "name": "stage_protocol",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "stage_host_id": {
+ "name": "stage_host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "stage_share_id": {
+ "name": "stage_share_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "guest_link_token": {
+ "name": "guest_link_token",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "ended_at": {
+ "name": "ended_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ }
+ },
+ "indexes": {
+ "idx_collab_rooms_owner": {
+ "name": "idx_collab_rooms_owner",
+ "columns": [
+ {
+ "expression": "owner_user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_collab_rooms_guest_token": {
+ "name": "idx_collab_rooms_guest_token",
+ "columns": [
+ {
+ "expression": "guest_link_token",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "collab_rooms_owner_user_id_users_id_fk": {
+ "name": "collab_rooms_owner_user_id_users_id_fk",
+ "tableFrom": "collab_rooms",
+ "tableTo": "users",
+ "columnsFrom": [
+ "owner_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "collab_rooms_presenter_user_id_users_id_fk": {
+ "name": "collab_rooms_presenter_user_id_users_id_fk",
+ "tableFrom": "collab_rooms",
+ "tableTo": "users",
+ "columnsFrom": [
+ "presenter_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "collab_rooms_stage_host_id_ssh_data_id_fk": {
+ "name": "collab_rooms_stage_host_id_ssh_data_id_fk",
+ "tableFrom": "collab_rooms",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "stage_host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "collab_rooms_stage_share_id_session_shares_id_fk": {
+ "name": "collab_rooms_stage_share_id_session_shares_id_fk",
+ "tableFrom": "collab_rooms",
+ "tableTo": "session_shares",
+ "columnsFrom": [
+ "stage_share_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.command_history": {
+ "name": "command_history",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "command": {
+ "name": "command",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "executed_at": {
+ "name": "executed_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_command_history_user_host": {
+ "name": "idx_command_history_user_host",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "host_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "command_history_user_id_users_id_fk": {
+ "name": "command_history_user_id_users_id_fk",
+ "tableFrom": "command_history",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "command_history_host_id_ssh_data_id_fk": {
+ "name": "command_history_host_id_ssh_data_id_fk",
+ "tableFrom": "command_history",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.credential_access": {
+ "name": "credential_access",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "role_id": {
+ "name": "role_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "granted_by": {
+ "name": "granted_by",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "permission_level": {
+ "name": "permission_level",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'use'"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_credential_access_user_id": {
+ "name": "idx_credential_access_user_id",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_credential_access_role_id": {
+ "name": "idx_credential_access_role_id",
+ "columns": [
+ {
+ "expression": "role_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_credential_access_credential_id": {
+ "name": "idx_credential_access_credential_id",
+ "columns": [
+ {
+ "expression": "credential_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "credential_access_credential_id_ssh_credentials_id_fk": {
+ "name": "credential_access_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "credential_access",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "credential_access_user_id_users_id_fk": {
+ "name": "credential_access_user_id_users_id_fk",
+ "tableFrom": "credential_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "credential_access_role_id_roles_id_fk": {
+ "name": "credential_access_role_id_roles_id_fk",
+ "tableFrom": "credential_access",
+ "tableTo": "roles",
+ "columnsFrom": [
+ "role_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "credential_access_granted_by_users_id_fk": {
+ "name": "credential_access_granted_by_users_id_fk",
+ "tableFrom": "credential_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "granted_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.credential_sidebar_preferences": {
+ "name": "credential_sidebar_preferences",
+ "schema": "",
+ "columns": {
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "data": {
+ "name": "data",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "credential_sidebar_preferences_user_id_users_id_fk": {
+ "name": "credential_sidebar_preferences_user_id_users_id_fk",
+ "tableFrom": "credential_sidebar_preferences",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.dashboard_service_links": {
+ "name": "dashboard_service_links",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "label": {
+ "name": "label",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "url": {
+ "name": "url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "order": {
+ "name": "order",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "default": 0
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "dashboard_service_links_user_id_users_id_fk": {
+ "name": "dashboard_service_links_user_id_users_id_fk",
+ "tableFrom": "dashboard_service_links",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {
+ "dashboard_service_links_sync_id_unique": {
+ "name": "dashboard_service_links_sync_id_unique",
+ "nullsNotDistinct": false,
+ "columns": [
+ "sync_id"
+ ]
+ }
+ },
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.dismissed_alerts": {
+ "name": "dismissed_alerts",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "alert_id": {
+ "name": "alert_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "dismissed_at": {
+ "name": "dismissed_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_dismissed_alerts_user_id": {
+ "name": "idx_dismissed_alerts_user_id",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "dismissed_alerts_user_id_users_id_fk": {
+ "name": "dismissed_alerts_user_id_users_id_fk",
+ "tableFrom": "dismissed_alerts",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.file_manager_pinned": {
+ "name": "file_manager_pinned",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "path": {
+ "name": "path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "pinned_at": {
+ "name": "pinned_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_file_manager_pinned_user": {
+ "name": "idx_file_manager_pinned_user",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "host_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "file_manager_pinned_user_id_users_id_fk": {
+ "name": "file_manager_pinned_user_id_users_id_fk",
+ "tableFrom": "file_manager_pinned",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "file_manager_pinned_host_id_ssh_data_id_fk": {
+ "name": "file_manager_pinned_host_id_ssh_data_id_fk",
+ "tableFrom": "file_manager_pinned",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.file_manager_recent": {
+ "name": "file_manager_recent",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "path": {
+ "name": "path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "last_opened": {
+ "name": "last_opened",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_file_manager_recent_user": {
+ "name": "idx_file_manager_recent_user",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "host_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "file_manager_recent_user_id_users_id_fk": {
+ "name": "file_manager_recent_user_id_users_id_fk",
+ "tableFrom": "file_manager_recent",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "file_manager_recent_host_id_ssh_data_id_fk": {
+ "name": "file_manager_recent_host_id_ssh_data_id_fk",
+ "tableFrom": "file_manager_recent",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.file_manager_shortcuts": {
+ "name": "file_manager_shortcuts",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "path": {
+ "name": "path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_file_manager_shortcuts_user": {
+ "name": "idx_file_manager_shortcuts_user",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "host_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "file_manager_shortcuts_user_id_users_id_fk": {
+ "name": "file_manager_shortcuts_user_id_users_id_fk",
+ "tableFrom": "file_manager_shortcuts",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "file_manager_shortcuts_host_id_ssh_data_id_fk": {
+ "name": "file_manager_shortcuts_host_id_ssh_data_id_fk",
+ "tableFrom": "file_manager_shortcuts",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.fleet_inventory": {
+ "name": "fleet_inventory",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "os_pretty_name": {
+ "name": "os_pretty_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "kernel": {
+ "name": "kernel",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "architecture": {
+ "name": "architecture",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "hostname": {
+ "name": "hostname",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "uptime_seconds": {
+ "name": "uptime_seconds",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "ip": {
+ "name": "ip",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "package_manager": {
+ "name": "package_manager",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "collected_at": {
+ "name": "collected_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_fleet_inventory_host": {
+ "name": "idx_fleet_inventory_host",
+ "columns": [
+ {
+ "expression": "host_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_fleet_inventory_user": {
+ "name": "idx_fleet_inventory_user",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "fleet_inventory_host_id_ssh_data_id_fk": {
+ "name": "fleet_inventory_host_id_ssh_data_id_fk",
+ "tableFrom": "fleet_inventory",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "fleet_inventory_user_id_users_id_fk": {
+ "name": "fleet_inventory_user_id_users_id_fk",
+ "tableFrom": "fleet_inventory",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.fleet_members": {
+ "name": "fleet_members",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "fleet_id": {
+ "name": "fleet_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "added_at": {
+ "name": "added_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_fleet_members_fleet_host": {
+ "name": "idx_fleet_members_fleet_host",
+ "columns": [
+ {
+ "expression": "fleet_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "host_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_fleet_members_host": {
+ "name": "idx_fleet_members_host",
+ "columns": [
+ {
+ "expression": "host_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "fleet_members_fleet_id_fleets_id_fk": {
+ "name": "fleet_members_fleet_id_fleets_id_fk",
+ "tableFrom": "fleet_members",
+ "tableTo": "fleets",
+ "columnsFrom": [
+ "fleet_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "fleet_members_host_id_ssh_data_id_fk": {
+ "name": "fleet_members_host_id_ssh_data_id_fk",
+ "tableFrom": "fleet_members",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.fleets": {
+ "name": "fleets",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "color": {
+ "name": "color",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "icon": {
+ "name": "icon",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "tag_rules": {
+ "name": "tag_rules",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "fleets_user_id_users_id_fk": {
+ "name": "fleets_user_id_users_id_fk",
+ "tableFrom": "fleets",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {
+ "fleets_sync_id_unique": {
+ "name": "fleets_sync_id_unique",
+ "nullsNotDistinct": false,
+ "columns": [
+ "sync_id"
+ ]
+ }
+ },
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.folder_access": {
+ "name": "folder_access",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "owner_user_id": {
+ "name": "owner_user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "folder": {
+ "name": "folder",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "role_id": {
+ "name": "role_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "granted_by": {
+ "name": "granted_by",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "permission_level": {
+ "name": "permission_level",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'connect'"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_folder_access_owner_folder": {
+ "name": "idx_folder_access_owner_folder",
+ "columns": [
+ {
+ "expression": "owner_user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "folder",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "folder_access_owner_user_id_users_id_fk": {
+ "name": "folder_access_owner_user_id_users_id_fk",
+ "tableFrom": "folder_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "owner_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "folder_access_user_id_users_id_fk": {
+ "name": "folder_access_user_id_users_id_fk",
+ "tableFrom": "folder_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "folder_access_role_id_roles_id_fk": {
+ "name": "folder_access_role_id_roles_id_fk",
+ "tableFrom": "folder_access",
+ "tableTo": "roles",
+ "columnsFrom": [
+ "role_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "folder_access_granted_by_users_id_fk": {
+ "name": "folder_access_granted_by_users_id_fk",
+ "tableFrom": "folder_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "granted_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.homepage_items": {
+ "name": "homepage_items",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "type_id": {
+ "name": "type_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "title": {
+ "name": "title",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "config": {
+ "name": "config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'{}'"
+ },
+ "folder_id": {
+ "name": "folder_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_homepage_items_user_id": {
+ "name": "idx_homepage_items_user_id",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "homepage_items_user_id_users_id_fk": {
+ "name": "homepage_items_user_id_users_id_fk",
+ "tableFrom": "homepage_items",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {
+ "homepage_items_sync_id_unique": {
+ "name": "homepage_items_sync_id_unique",
+ "nullsNotDistinct": false,
+ "columns": [
+ "sync_id"
+ ]
+ }
+ },
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.homepage_layouts": {
+ "name": "homepage_layouts",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "layout": {
+ "name": "layout",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'{}'"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "homepage_layouts_user_id_users_id_fk": {
+ "name": "homepage_layouts_user_id_users_id_fk",
+ "tableFrom": "homepage_layouts",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {
+ "homepage_layouts_user_id_unique": {
+ "name": "homepage_layouts_user_id_unique",
+ "nullsNotDistinct": false,
+ "columns": [
+ "user_id"
+ ]
+ }
+ },
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.host_access": {
+ "name": "host_access",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "role_id": {
+ "name": "role_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "granted_by": {
+ "name": "granted_by",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "permission_level": {
+ "name": "permission_level",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'connect'"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "last_accessed_at": {
+ "name": "last_accessed_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "access_count": {
+ "name": "access_count",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "default": 0
+ }
+ },
+ "indexes": {
+ "idx_host_access_user_id": {
+ "name": "idx_host_access_user_id",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_host_access_role_id": {
+ "name": "idx_host_access_role_id",
+ "columns": [
+ {
+ "expression": "role_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_host_access_host_id": {
+ "name": "idx_host_access_host_id",
+ "columns": [
+ {
+ "expression": "host_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_host_access_expires_at": {
+ "name": "idx_host_access_expires_at",
+ "columns": [
+ {
+ "expression": "expires_at",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "host_access_host_id_ssh_data_id_fk": {
+ "name": "host_access_host_id_ssh_data_id_fk",
+ "tableFrom": "host_access",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "host_access_user_id_users_id_fk": {
+ "name": "host_access_user_id_users_id_fk",
+ "tableFrom": "host_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "host_access_role_id_roles_id_fk": {
+ "name": "host_access_role_id_roles_id_fk",
+ "tableFrom": "host_access",
+ "tableTo": "roles",
+ "columnsFrom": [
+ "role_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "host_access_granted_by_users_id_fk": {
+ "name": "host_access_granted_by_users_id_fk",
+ "tableFrom": "host_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "granted_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.host_health_checks": {
+ "name": "host_health_checks",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "checks": {
+ "name": "checks",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "interval_seconds": {
+ "name": "interval_seconds",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "default": 300
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_host_health_checks_user_host": {
+ "name": "idx_host_health_checks_user_host",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "host_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "host_health_checks_user_id_users_id_fk": {
+ "name": "host_health_checks_user_id_users_id_fk",
+ "tableFrom": "host_health_checks",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "host_health_checks_host_id_ssh_data_id_fk": {
+ "name": "host_health_checks_host_id_ssh_data_id_fk",
+ "tableFrom": "host_health_checks",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.host_health_history": {
+ "name": "host_health_history",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "check_id": {
+ "name": "check_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "ts": {
+ "name": "ts",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "ok": {
+ "name": "ok",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "latency_ms": {
+ "name": "latency_ms",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "detail": {
+ "name": "detail",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "host_health_history_user_id_users_id_fk": {
+ "name": "host_health_history_user_id_users_id_fk",
+ "tableFrom": "host_health_history",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "host_health_history_host_id_ssh_data_id_fk": {
+ "name": "host_health_history_host_id_ssh_data_id_fk",
+ "tableFrom": "host_health_history",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.host_metrics_history": {
+ "name": "host_metrics_history",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "ts": {
+ "name": "ts",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "cpu_percent": {
+ "name": "cpu_percent",
+ "type": "double precision",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "mem_percent": {
+ "name": "mem_percent",
+ "type": "double precision",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "disk_percent": {
+ "name": "disk_percent",
+ "type": "double precision",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "net_rx_bytes": {
+ "name": "net_rx_bytes",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "net_tx_bytes": {
+ "name": "net_tx_bytes",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "host_metrics_history_host_id_ssh_data_id_fk": {
+ "name": "host_metrics_history_host_id_ssh_data_id_fk",
+ "tableFrom": "host_metrics_history",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.host_metrics_preferences": {
+ "name": "host_metrics_preferences",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "layout": {
+ "name": "layout",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_host_metrics_prefs_user_host": {
+ "name": "idx_host_metrics_prefs_user_host",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "host_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "host_metrics_preferences_user_id_users_id_fk": {
+ "name": "host_metrics_preferences_user_id_users_id_fk",
+ "tableFrom": "host_metrics_preferences",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "host_metrics_preferences_host_id_ssh_data_id_fk": {
+ "name": "host_metrics_preferences_host_id_ssh_data_id_fk",
+ "tableFrom": "host_metrics_preferences",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.host_sidebar_preferences": {
+ "name": "host_sidebar_preferences",
+ "schema": "",
+ "columns": {
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "data": {
+ "name": "data",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "host_sidebar_preferences_user_id_users_id_fk": {
+ "name": "host_sidebar_preferences_user_id_users_id_fk",
+ "tableFrom": "host_sidebar_preferences",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.ssh_data": {
+ "name": "ssh_data",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "connection_type": {
+ "name": "connection_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'ssh'"
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "ip": {
+ "name": "ip",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "port": {
+ "name": "port",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "username": {
+ "name": "username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "folder": {
+ "name": "folder",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "parent_host_id": {
+ "name": "parent_host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "tags": {
+ "name": "tags",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "pin": {
+ "name": "pin",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "sort_order": {
+ "name": "sort_order",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "auth_type": {
+ "name": "auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "use_warpgate": {
+ "name": "use_warpgate",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "share_ssh_auth": {
+ "name": "share_ssh_auth",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "force_keyboard_interactive": {
+ "name": "force_keyboard_interactive",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "password": {
+ "name": "password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "key": {
+ "name": "key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "key_password": {
+ "name": "key_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "key_type": {
+ "name": "key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "sudo_password": {
+ "name": "sudo_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "autostart_password": {
+ "name": "autostart_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "autostart_key": {
+ "name": "autostart_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "autostart_key_password": {
+ "name": "autostart_key_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "override_credential_username": {
+ "name": "override_credential_username",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "vault_profile_id": {
+ "name": "vault_profile_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "enable_terminal": {
+ "name": "enable_terminal",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": true
+ },
+ "enable_session_logging": {
+ "name": "enable_session_logging",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": true
+ },
+ "allow_session_sharing": {
+ "name": "allow_session_sharing",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": true
+ },
+ "enable_command_history": {
+ "name": "enable_command_history",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": true
+ },
+ "enable_tunnel": {
+ "name": "enable_tunnel",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": true
+ },
+ "tunnel_connections": {
+ "name": "tunnel_connections",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "jump_hosts": {
+ "name": "jump_hosts",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "enable_file_manager": {
+ "name": "enable_file_manager",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": true
+ },
+ "scp_legacy": {
+ "name": "scp_legacy",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "enable_docker": {
+ "name": "enable_docker",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "enable_web_ui": {
+ "name": "enable_web_ui",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "enable_tmux_monitor": {
+ "name": "enable_tmux_monitor",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "enable_terminal_toolbar": {
+ "name": "enable_terminal_toolbar",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": true
+ },
+ "enable_ai_assistant": {
+ "name": "enable_ai_assistant",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "show_terminal_in_sidebar": {
+ "name": "show_terminal_in_sidebar",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": true
+ },
+ "show_file_manager_in_sidebar": {
+ "name": "show_file_manager_in_sidebar",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "show_tunnel_in_sidebar": {
+ "name": "show_tunnel_in_sidebar",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "show_docker_in_sidebar": {
+ "name": "show_docker_in_sidebar",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "show_server_stats_in_sidebar": {
+ "name": "show_server_stats_in_sidebar",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "default_path": {
+ "name": "default_path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "stats_config": {
+ "name": "stats_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "docker_config": {
+ "name": "docker_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "web_ui_config": {
+ "name": "web_ui_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "enable_proxmox": {
+ "name": "enable_proxmox",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "proxmox_config": {
+ "name": "proxmox_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "enable_proxmox_stats": {
+ "name": "enable_proxmox_stats",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "proxmox_stats_config": {
+ "name": "proxmox_stats_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "terminal_config": {
+ "name": "terminal_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "quick_actions": {
+ "name": "quick_actions",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "notes": {
+ "name": "notes",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "enable_ssh": {
+ "name": "enable_ssh",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": true
+ },
+ "enable_rdp": {
+ "name": "enable_rdp",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "enable_vnc": {
+ "name": "enable_vnc",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "enable_telnet": {
+ "name": "enable_telnet",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "ssh_port": {
+ "name": "ssh_port",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "default": 22
+ },
+ "rdp_port": {
+ "name": "rdp_port",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "default": 3389
+ },
+ "vnc_port": {
+ "name": "vnc_port",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "default": 5900
+ },
+ "telnet_port": {
+ "name": "telnet_port",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "default": 23
+ },
+ "rdp_credential_id": {
+ "name": "rdp_credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "rdp_user": {
+ "name": "rdp_user",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "rdp_password": {
+ "name": "rdp_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "rdp_domain": {
+ "name": "rdp_domain",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "rdp_security": {
+ "name": "rdp_security",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "rdp_ignore_cert": {
+ "name": "rdp_ignore_cert",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "default": false
+ },
+ "vnc_credential_id": {
+ "name": "vnc_credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "vnc_password": {
+ "name": "vnc_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "vnc_user": {
+ "name": "vnc_user",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "telnet_user": {
+ "name": "telnet_user",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "telnet_password": {
+ "name": "telnet_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "telnet_credential_id": {
+ "name": "telnet_credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "rdp_auth_type": {
+ "name": "rdp_auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "vnc_auth_type": {
+ "name": "vnc_auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "telnet_auth_type": {
+ "name": "telnet_auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "domain": {
+ "name": "domain",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "security": {
+ "name": "security",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "ignore_cert": {
+ "name": "ignore_cert",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "default": false
+ },
+ "guacamole_config": {
+ "name": "guacamole_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "use_socks5": {
+ "name": "use_socks5",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "socks5_host": {
+ "name": "socks5_host",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "socks5_port": {
+ "name": "socks5_port",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "socks5_username": {
+ "name": "socks5_username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "socks5_password": {
+ "name": "socks5_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "socks5_proxy_chain": {
+ "name": "socks5_proxy_chain",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "connection_origin": {
+ "name": "connection_origin",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "mac_address": {
+ "name": "mac_address",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "wol_broadcast_address": {
+ "name": "wol_broadcast_address",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "port_knock_sequence": {
+ "name": "port_knock_sequence",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "host_key_fingerprint": {
+ "name": "host_key_fingerprint",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "host_key_type": {
+ "name": "host_key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "host_key_algorithm": {
+ "name": "host_key_algorithm",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "default": "'sha256'"
+ },
+ "host_key_first_seen": {
+ "name": "host_key_first_seen",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "host_key_last_verified": {
+ "name": "host_key_last_verified",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "host_key_changed_count": {
+ "name": "host_key_changed_count",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "default": 0
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_ssh_data_user_id": {
+ "name": "idx_ssh_data_user_id",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_ssh_data_parent_host": {
+ "name": "idx_ssh_data_parent_host",
+ "columns": [
+ {
+ "expression": "parent_host_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_ssh_data_credential": {
+ "name": "idx_ssh_data_credential",
+ "columns": [
+ {
+ "expression": "credential_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "ssh_data_user_id_users_id_fk": {
+ "name": "ssh_data_user_id_users_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "ssh_data_parent_host_id_ssh_data_id_fk": {
+ "name": "ssh_data_parent_host_id_ssh_data_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "parent_host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "ssh_data_credential_id_ssh_credentials_id_fk": {
+ "name": "ssh_data_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "ssh_data_vault_profile_id_vault_profiles_id_fk": {
+ "name": "ssh_data_vault_profile_id_vault_profiles_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "vault_profiles",
+ "columnsFrom": [
+ "vault_profile_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "ssh_data_rdp_credential_id_ssh_credentials_id_fk": {
+ "name": "ssh_data_rdp_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "rdp_credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "ssh_data_vnc_credential_id_ssh_credentials_id_fk": {
+ "name": "ssh_data_vnc_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "vnc_credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "ssh_data_telnet_credential_id_ssh_credentials_id_fk": {
+ "name": "ssh_data_telnet_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "telnet_credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {
+ "ssh_data_sync_id_unique": {
+ "name": "ssh_data_sync_id_unique",
+ "nullsNotDistinct": false,
+ "columns": [
+ "sync_id"
+ ]
+ }
+ },
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.network_topology": {
+ "name": "network_topology",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "topology": {
+ "name": "topology",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "network_topology_user_id_users_id_fk": {
+ "name": "network_topology_user_id_users_id_fk",
+ "tableFrom": "network_topology",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.notification_channels": {
+ "name": "notification_channels",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "type": {
+ "name": "type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "config": {
+ "name": "config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "enabled": {
+ "name": "enabled",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": true
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "notification_channels_user_id_users_id_fk": {
+ "name": "notification_channels_user_id_users_id_fk",
+ "tableFrom": "notification_channels",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.opkssh_tokens": {
+ "name": "opkssh_tokens",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "ssh_cert": {
+ "name": "ssh_cert",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "private_key": {
+ "name": "private_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "email": {
+ "name": "email",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "sub": {
+ "name": "sub",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "issuer": {
+ "name": "issuer",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "audience": {
+ "name": "audience",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "last_used": {
+ "name": "last_used",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ }
+ },
+ "indexes": {
+ "idx_opkssh_tokens_user_host": {
+ "name": "idx_opkssh_tokens_user_host",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "host_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "opkssh_tokens_user_id_users_id_fk": {
+ "name": "opkssh_tokens_user_id_users_id_fk",
+ "tableFrom": "opkssh_tokens",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "opkssh_tokens_host_id_ssh_data_id_fk": {
+ "name": "opkssh_tokens_host_id_ssh_data_id_fk",
+ "tableFrom": "opkssh_tokens",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.plugin_install_counts": {
+ "name": "plugin_install_counts",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "registry_id": {
+ "name": "registry_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "count": {
+ "name": "count",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "default": 0
+ },
+ "source": {
+ "name": "source",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'aggregate-telemetry'"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_plugin_install_counts_plugin_registry": {
+ "name": "idx_plugin_install_counts_plugin_registry",
+ "columns": [
+ {
+ "expression": "plugin_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "registry_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {},
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.plugin_migrations": {
+ "name": "plugin_migrations",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "migration_id": {
+ "name": "migration_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "checksum": {
+ "name": "checksum",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "applied_at": {
+ "name": "applied_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_plugin_migrations_plugin_migration": {
+ "name": "idx_plugin_migrations_plugin_migration",
+ "columns": [
+ {
+ "expression": "plugin_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "migration_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "plugin_migrations_plugin_id_plugins_id_fk": {
+ "name": "plugin_migrations_plugin_id_plugins_id_fk",
+ "tableFrom": "plugin_migrations",
+ "tableTo": "plugins",
+ "columnsFrom": [
+ "plugin_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.plugin_permission_grants": {
+ "name": "plugin_permission_grants",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "capability": {
+ "name": "capability",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "granted_at": {
+ "name": "granted_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "granted_by": {
+ "name": "granted_by",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "source": {
+ "name": "source",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'admin'"
+ }
+ },
+ "indexes": {
+ "idx_plugin_permission_grants_plugin_capability": {
+ "name": "idx_plugin_permission_grants_plugin_capability",
+ "columns": [
+ {
+ "expression": "plugin_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "capability",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "plugin_permission_grants_plugin_id_plugins_id_fk": {
+ "name": "plugin_permission_grants_plugin_id_plugins_id_fk",
+ "tableFrom": "plugin_permission_grants",
+ "tableTo": "plugins",
+ "columnsFrom": [
+ "plugin_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "plugin_permission_grants_granted_by_users_id_fk": {
+ "name": "plugin_permission_grants_granted_by_users_id_fk",
+ "tableFrom": "plugin_permission_grants",
+ "tableTo": "users",
+ "columnsFrom": [
+ "granted_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.plugin_registries": {
+ "name": "plugin_registries",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "url": {
+ "name": "url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "kind": {
+ "name": "kind",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'community'"
+ },
+ "enabled": {
+ "name": "enabled",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": true
+ },
+ "signing_key": {
+ "name": "signing_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "last_checked_at": {
+ "name": "last_checked_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "last_index_hash": {
+ "name": "last_index_hash",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {},
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.plugin_settings": {
+ "name": "plugin_settings",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "scope": {
+ "name": "scope",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "scope_id": {
+ "name": "scope_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "key": {
+ "name": "key",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "value": {
+ "name": "value",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "encrypted": {
+ "name": "encrypted",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_plugin_settings_scope_key": {
+ "name": "idx_plugin_settings_scope_key",
+ "columns": [
+ {
+ "expression": "plugin_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "scope",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "scope_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "key",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_plugin_settings_plugin_scope": {
+ "name": "idx_plugin_settings_plugin_scope",
+ "columns": [
+ {
+ "expression": "plugin_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "scope",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "plugin_settings_plugin_id_plugins_id_fk": {
+ "name": "plugin_settings_plugin_id_plugins_id_fk",
+ "tableFrom": "plugin_settings",
+ "tableTo": "plugins",
+ "columnsFrom": [
+ "plugin_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.plugin_storage": {
+ "name": "plugin_storage",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "key": {
+ "name": "key",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "value": {
+ "name": "value",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_plugin_storage_plugin_key": {
+ "name": "idx_plugin_storage_plugin_key",
+ "columns": [
+ {
+ "expression": "plugin_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "key",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "plugin_storage_plugin_id_plugins_id_fk": {
+ "name": "plugin_storage_plugin_id_plugins_id_fk",
+ "tableFrom": "plugin_storage",
+ "tableTo": "plugins",
+ "columnsFrom": [
+ "plugin_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.plugins": {
+ "name": "plugins",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "version": {
+ "name": "version",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "tier": {
+ "name": "tier",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'available'"
+ },
+ "source": {
+ "name": "source",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'community'"
+ },
+ "registry_id": {
+ "name": "registry_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "state": {
+ "name": "state",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'disabled'"
+ },
+ "last_error": {
+ "name": "last_error",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "installed_at": {
+ "name": "installed_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "auto_update": {
+ "name": "auto_update",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "manifest_json": {
+ "name": "manifest_json",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ }
+ },
+ "indexes": {
+ "idx_plugins_registry_id": {
+ "name": "idx_plugins_registry_id",
+ "columns": [
+ {
+ "expression": "registry_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {},
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.proxmox_node_history": {
+ "name": "proxmox_node_history",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "ts": {
+ "name": "ts",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "cpu_percent": {
+ "name": "cpu_percent",
+ "type": "double precision",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "mem_percent": {
+ "name": "mem_percent",
+ "type": "double precision",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "disk_percent": {
+ "name": "disk_percent",
+ "type": "double precision",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "net_rx_bytes": {
+ "name": "net_rx_bytes",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "net_tx_bytes": {
+ "name": "net_tx_bytes",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "proxmox_node_history_host_id_ssh_data_id_fk": {
+ "name": "proxmox_node_history_host_id_ssh_data_id_fk",
+ "tableFrom": "proxmox_node_history",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.proxmox_stats_preferences": {
+ "name": "proxmox_stats_preferences",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "layout": {
+ "name": "layout",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_proxmox_stats_prefs_user_host": {
+ "name": "idx_proxmox_stats_prefs_user_host",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "host_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "proxmox_stats_preferences_user_id_users_id_fk": {
+ "name": "proxmox_stats_preferences_user_id_users_id_fk",
+ "tableFrom": "proxmox_stats_preferences",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "proxmox_stats_preferences_host_id_ssh_data_id_fk": {
+ "name": "proxmox_stats_preferences_host_id_ssh_data_id_fk",
+ "tableFrom": "proxmox_stats_preferences",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.rbac_applied_defaults": {
+ "name": "rbac_applied_defaults",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "role_name": {
+ "name": "role_name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "permission": {
+ "name": "permission",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "applied_at": {
+ "name": "applied_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_rbac_applied_defaults_role_permission": {
+ "name": "idx_rbac_applied_defaults_role_permission",
+ "columns": [
+ {
+ "expression": "role_name",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "permission",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {},
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.rbac_known_permissions": {
+ "name": "rbac_known_permissions",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "permission": {
+ "name": "permission",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "first_seen_at": {
+ "name": "first_seen_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_rbac_known_permissions_permission": {
+ "name": "idx_rbac_known_permissions_permission",
+ "columns": [
+ {
+ "expression": "permission",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {},
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.recent_activity": {
+ "name": "recent_activity",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "type": {
+ "name": "type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "host_name": {
+ "name": "host_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "timestamp": {
+ "name": "timestamp",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_recent_activity_user_ts": {
+ "name": "idx_recent_activity_user_ts",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "timestamp",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "recent_activity_user_id_users_id_fk": {
+ "name": "recent_activity_user_id_users_id_fk",
+ "tableFrom": "recent_activity",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "recent_activity_host_id_ssh_data_id_fk": {
+ "name": "recent_activity_host_id_ssh_data_id_fk",
+ "tableFrom": "recent_activity",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.roles": {
+ "name": "roles",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "display_name": {
+ "name": "display_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "is_system": {
+ "name": "is_system",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "permissions": {
+ "name": "permissions",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {},
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {
+ "roles_name_unique": {
+ "name": "roles_name_unique",
+ "nullsNotDistinct": false,
+ "columns": [
+ "name"
+ ]
+ }
+ },
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.secret_sources": {
+ "name": "secret_sources",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "kind": {
+ "name": "kind",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'onepassword-connect'"
+ },
+ "base_url": {
+ "name": "base_url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "token": {
+ "name": "token",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "shared": {
+ "name": "shared",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_secret_sources_user": {
+ "name": "idx_secret_sources_user",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "secret_sources_user_id_users_id_fk": {
+ "name": "secret_sources_user_id_users_id_fk",
+ "tableFrom": "secret_sources",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.session_recordings": {
+ "name": "session_recordings",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "username": {
+ "name": "username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "access_id": {
+ "name": "access_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "started_at": {
+ "name": "started_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "ended_at": {
+ "name": "ended_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "duration": {
+ "name": "duration",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "commands": {
+ "name": "commands",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "dangerous_actions": {
+ "name": "dangerous_actions",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "recording_path": {
+ "name": "recording_path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "protocol": {
+ "name": "protocol",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'ssh'"
+ },
+ "format": {
+ "name": "format",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'text'"
+ },
+ "terminated_by_owner": {
+ "name": "terminated_by_owner",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false,
+ "default": false
+ },
+ "termination_reason": {
+ "name": "termination_reason",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ }
+ },
+ "indexes": {
+ "idx_session_recordings_user_started": {
+ "name": "idx_session_recordings_user_started",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "started_at",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_session_recordings_host": {
+ "name": "idx_session_recordings_host",
+ "columns": [
+ {
+ "expression": "host_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "session_recordings_host_id_ssh_data_id_fk": {
+ "name": "session_recordings_host_id_ssh_data_id_fk",
+ "tableFrom": "session_recordings",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "session_recordings_user_id_users_id_fk": {
+ "name": "session_recordings_user_id_users_id_fk",
+ "tableFrom": "session_recordings",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "session_recordings_access_id_host_access_id_fk": {
+ "name": "session_recordings_access_id_host_access_id_fk",
+ "tableFrom": "session_recordings",
+ "tableTo": "host_access",
+ "columnsFrom": [
+ "access_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.session_share_participants": {
+ "name": "session_share_participants",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "share_id": {
+ "name": "share_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "guest_label": {
+ "name": "guest_label",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "joined_at": {
+ "name": "joined_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "left_at": {
+ "name": "left_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "session_share_participants_share_id_session_shares_id_fk": {
+ "name": "session_share_participants_share_id_session_shares_id_fk",
+ "tableFrom": "session_share_participants",
+ "tableTo": "session_shares",
+ "columnsFrom": [
+ "share_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "session_share_participants_user_id_users_id_fk": {
+ "name": "session_share_participants_user_id_users_id_fk",
+ "tableFrom": "session_share_participants",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.session_shares": {
+ "name": "session_shares",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "owner_user_id": {
+ "name": "owner_user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "protocol": {
+ "name": "protocol",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "session_id": {
+ "name": "session_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "tab_instance_id": {
+ "name": "tab_instance_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "share_type": {
+ "name": "share_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "target_user_id": {
+ "name": "target_user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "link_token": {
+ "name": "link_token",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "permission_level": {
+ "name": "permission_level",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'read-only'"
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "revoked_at": {
+ "name": "revoked_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "last_joined_at": {
+ "name": "last_joined_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "join_count": {
+ "name": "join_count",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "default": 0
+ }
+ },
+ "indexes": {
+ "idx_session_shares_session_id": {
+ "name": "idx_session_shares_session_id",
+ "columns": [
+ {
+ "expression": "session_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_session_shares_host_id": {
+ "name": "idx_session_shares_host_id",
+ "columns": [
+ {
+ "expression": "host_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "session_shares_host_id_ssh_data_id_fk": {
+ "name": "session_shares_host_id_ssh_data_id_fk",
+ "tableFrom": "session_shares",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "session_shares_owner_user_id_users_id_fk": {
+ "name": "session_shares_owner_user_id_users_id_fk",
+ "tableFrom": "session_shares",
+ "tableTo": "users",
+ "columnsFrom": [
+ "owner_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "session_shares_target_user_id_users_id_fk": {
+ "name": "session_shares_target_user_id_users_id_fk",
+ "tableFrom": "session_shares",
+ "tableTo": "users",
+ "columnsFrom": [
+ "target_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {
+ "session_shares_link_token_unique": {
+ "name": "session_shares_link_token_unique",
+ "nullsNotDistinct": false,
+ "columns": [
+ "link_token"
+ ]
+ }
+ },
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.sessions": {
+ "name": "sessions",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "jwt_token": {
+ "name": "jwt_token",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "device_type": {
+ "name": "device_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "device_info": {
+ "name": "device_info",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "oidc_sub": {
+ "name": "oidc_sub",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "oidc_sid": {
+ "name": "oidc_sid",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "sso_provider_id": {
+ "name": "sso_provider_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "last_active_at": {
+ "name": "last_active_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_sessions_user_id": {
+ "name": "idx_sessions_user_id",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_sessions_expires_at": {
+ "name": "idx_sessions_expires_at",
+ "columns": [
+ {
+ "expression": "expires_at",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "sessions_user_id_users_id_fk": {
+ "name": "sessions_user_id_users_id_fk",
+ "tableFrom": "sessions",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.settings": {
+ "name": "settings",
+ "schema": "",
+ "columns": {
+ "key": {
+ "name": "key",
+ "type": "varchar(255)",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "value": {
+ "name": "value",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {},
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.shared_credential_secrets": {
+ "name": "shared_credential_secrets",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "credential_access_id": {
+ "name": "credential_access_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "target_user_id": {
+ "name": "target_user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "encrypted_username": {
+ "name": "encrypted_username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "auth_type": {
+ "name": "auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'password'"
+ },
+ "encrypted_password": {
+ "name": "encrypted_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "encrypted_key": {
+ "name": "encrypted_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "encrypted_key_password": {
+ "name": "encrypted_key_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "key_type": {
+ "name": "key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "public_key": {
+ "name": "public_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "cert_public_key": {
+ "name": "cert_public_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_shared_credential_secrets_scope": {
+ "name": "idx_shared_credential_secrets_scope",
+ "columns": [
+ {
+ "expression": "credential_access_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "target_user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_shared_credential_secrets_target": {
+ "name": "idx_shared_credential_secrets_target",
+ "columns": [
+ {
+ "expression": "target_user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "credential_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "shared_credential_secrets_target_user_id_users_id_fk": {
+ "name": "shared_credential_secrets_target_user_id_users_id_fk",
+ "tableFrom": "shared_credential_secrets",
+ "tableTo": "users",
+ "columnsFrom": [
+ "target_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "shared_credential_secrets_credential_id_ssh_credentials_id_fk": {
+ "name": "shared_credential_secrets_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "shared_credential_secrets",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "shared_cred_secrets_access_id_fk": {
+ "name": "shared_cred_secrets_access_id_fk",
+ "tableFrom": "shared_credential_secrets",
+ "tableTo": "credential_access",
+ "columnsFrom": [
+ "credential_access_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.shared_host_auth_overrides": {
+ "name": "shared_host_auth_overrides",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "protocol": {
+ "name": "protocol",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'ssh'"
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "shared_host_auth_overrides_host_user_protocol_unique": {
+ "name": "shared_host_auth_overrides_host_user_protocol_unique",
+ "columns": [
+ {
+ "expression": "host_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "protocol",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "shared_host_auth_overrides_host_id_ssh_data_id_fk": {
+ "name": "shared_host_auth_overrides_host_id_ssh_data_id_fk",
+ "tableFrom": "shared_host_auth_overrides",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "shared_host_auth_overrides_user_id_users_id_fk": {
+ "name": "shared_host_auth_overrides_user_id_users_id_fk",
+ "tableFrom": "shared_host_auth_overrides",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk": {
+ "name": "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "shared_host_auth_overrides",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.shared_host_secrets": {
+ "name": "shared_host_secrets",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "host_access_id": {
+ "name": "host_access_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "target_user_id": {
+ "name": "target_user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "protocol": {
+ "name": "protocol",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'ssh'"
+ },
+ "source_type": {
+ "name": "source_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'credential'"
+ },
+ "original_credential_id": {
+ "name": "original_credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "encrypted_username": {
+ "name": "encrypted_username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "encrypted_auth_type": {
+ "name": "encrypted_auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "encrypted_password": {
+ "name": "encrypted_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "encrypted_key": {
+ "name": "encrypted_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "encrypted_key_password": {
+ "name": "encrypted_key_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "encrypted_key_type": {
+ "name": "encrypted_key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "encrypted_domain": {
+ "name": "encrypted_domain",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_shared_host_secrets_scope": {
+ "name": "idx_shared_host_secrets_scope",
+ "columns": [
+ {
+ "expression": "host_access_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "target_user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "protocol",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "shared_host_secrets_host_access_id_host_access_id_fk": {
+ "name": "shared_host_secrets_host_access_id_host_access_id_fk",
+ "tableFrom": "shared_host_secrets",
+ "tableTo": "host_access",
+ "columnsFrom": [
+ "host_access_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "shared_host_secrets_target_user_id_users_id_fk": {
+ "name": "shared_host_secrets_target_user_id_users_id_fk",
+ "tableFrom": "shared_host_secrets",
+ "tableTo": "users",
+ "columnsFrom": [
+ "target_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "shared_host_secrets_original_credential_id_ssh_credentials_id_fk": {
+ "name": "shared_host_secrets_original_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "shared_host_secrets",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "original_credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.snippet_access": {
+ "name": "snippet_access",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "snippet_id": {
+ "name": "snippet_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "role_id": {
+ "name": "role_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "granted_by": {
+ "name": "granted_by",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "permission_level": {
+ "name": "permission_level",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'view'"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_snippet_access_user_id": {
+ "name": "idx_snippet_access_user_id",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_snippet_access_snippet_id": {
+ "name": "idx_snippet_access_snippet_id",
+ "columns": [
+ {
+ "expression": "snippet_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_snippet_access_role_id": {
+ "name": "idx_snippet_access_role_id",
+ "columns": [
+ {
+ "expression": "role_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "snippet_access_snippet_id_snippets_id_fk": {
+ "name": "snippet_access_snippet_id_snippets_id_fk",
+ "tableFrom": "snippet_access",
+ "tableTo": "snippets",
+ "columnsFrom": [
+ "snippet_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "snippet_access_user_id_users_id_fk": {
+ "name": "snippet_access_user_id_users_id_fk",
+ "tableFrom": "snippet_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "snippet_access_role_id_roles_id_fk": {
+ "name": "snippet_access_role_id_roles_id_fk",
+ "tableFrom": "snippet_access",
+ "tableTo": "roles",
+ "columnsFrom": [
+ "role_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "snippet_access_granted_by_users_id_fk": {
+ "name": "snippet_access_granted_by_users_id_fk",
+ "tableFrom": "snippet_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "granted_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.snippet_folders": {
+ "name": "snippet_folders",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "color": {
+ "name": "color",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "icon": {
+ "name": "icon",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "snippet_folders_user_id_users_id_fk": {
+ "name": "snippet_folders_user_id_users_id_fk",
+ "tableFrom": "snippet_folders",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {
+ "snippet_folders_sync_id_unique": {
+ "name": "snippet_folders_sync_id_unique",
+ "nullsNotDistinct": false,
+ "columns": [
+ "sync_id"
+ ]
+ }
+ },
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.snippets": {
+ "name": "snippets",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "content": {
+ "name": "content",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "folder": {
+ "name": "folder",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "order": {
+ "name": "order",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "default": 0
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "host_filter": {
+ "name": "host_filter",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "is_note": {
+ "name": "is_note",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ }
+ },
+ "indexes": {
+ "idx_snippets_user_id": {
+ "name": "idx_snippets_user_id",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "snippets_user_id_users_id_fk": {
+ "name": "snippets_user_id_users_id_fk",
+ "tableFrom": "snippets",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {
+ "snippets_sync_id_unique": {
+ "name": "snippets_sync_id_unique",
+ "nullsNotDistinct": false,
+ "columns": [
+ "sync_id"
+ ]
+ }
+ },
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.ssh_credential_usage": {
+ "name": "ssh_credential_usage",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "used_at": {
+ "name": "used_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_ssh_credential_usage_credential": {
+ "name": "idx_ssh_credential_usage_credential",
+ "columns": [
+ {
+ "expression": "credential_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_ssh_credential_usage_user": {
+ "name": "idx_ssh_credential_usage_user",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "ssh_credential_usage_credential_id_ssh_credentials_id_fk": {
+ "name": "ssh_credential_usage_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "ssh_credential_usage",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "ssh_credential_usage_host_id_ssh_data_id_fk": {
+ "name": "ssh_credential_usage_host_id_ssh_data_id_fk",
+ "tableFrom": "ssh_credential_usage",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "ssh_credential_usage_user_id_users_id_fk": {
+ "name": "ssh_credential_usage_user_id_users_id_fk",
+ "tableFrom": "ssh_credential_usage",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.ssh_credentials": {
+ "name": "ssh_credentials",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "folder": {
+ "name": "folder",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "tags": {
+ "name": "tags",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "pin": {
+ "name": "pin",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "sort_order": {
+ "name": "sort_order",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "auth_type": {
+ "name": "auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "username": {
+ "name": "username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "password": {
+ "name": "password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "key": {
+ "name": "key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "private_key": {
+ "name": "private_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "public_key": {
+ "name": "public_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "key_password": {
+ "name": "key_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "key_type": {
+ "name": "key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "detected_key_type": {
+ "name": "detected_key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "cert_public_key": {
+ "name": "cert_public_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "usage_count": {
+ "name": "usage_count",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "default": 0
+ },
+ "last_used": {
+ "name": "last_used",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_ssh_credentials_user_id": {
+ "name": "idx_ssh_credentials_user_id",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "ssh_credentials_user_id_users_id_fk": {
+ "name": "ssh_credentials_user_id_users_id_fk",
+ "tableFrom": "ssh_credentials",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {
+ "ssh_credentials_sync_id_unique": {
+ "name": "ssh_credentials_sync_id_unique",
+ "nullsNotDistinct": false,
+ "columns": [
+ "sync_id"
+ ]
+ }
+ },
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.ssh_folders": {
+ "name": "ssh_folders",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "color": {
+ "name": "color",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "icon": {
+ "name": "icon",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "sort_order": {
+ "name": "sort_order",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_ssh_folders_user_id": {
+ "name": "idx_ssh_folders_user_id",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "ssh_folders_user_id_users_id_fk": {
+ "name": "ssh_folders_user_id_users_id_fk",
+ "tableFrom": "ssh_folders",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "ssh_folders_credential_id_ssh_credentials_id_fk": {
+ "name": "ssh_folders_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "ssh_folders",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {
+ "ssh_folders_sync_id_unique": {
+ "name": "ssh_folders_sync_id_unique",
+ "nullsNotDistinct": false,
+ "columns": [
+ "sync_id"
+ ]
+ }
+ },
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.sso_providers": {
+ "name": "sso_providers",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "type": {
+ "name": "type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "enabled": {
+ "name": "enabled",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": true
+ },
+ "display_order": {
+ "name": "display_order",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "default": 0
+ },
+ "config": {
+ "name": "config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {},
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.sync_tombstones": {
+ "name": "sync_tombstones",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "entity_type": {
+ "name": "entity_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "deleted_at": {
+ "name": "deleted_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "sync_tombstones_user_id_users_id_fk": {
+ "name": "sync_tombstones_user_id_users_id_fk",
+ "tableFrom": "sync_tombstones",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.termix_identities": {
+ "name": "termix_identities",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "handle": {
+ "name": "handle",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "termix_identities_user_id_users_id_fk": {
+ "name": "termix_identities_user_id_users_id_fk",
+ "tableFrom": "termix_identities",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {
+ "termix_identities_user_id_unique": {
+ "name": "termix_identities_user_id_unique",
+ "nullsNotDistinct": false,
+ "columns": [
+ "user_id"
+ ]
+ },
+ "termix_identities_handle_unique": {
+ "name": "termix_identities_handle_unique",
+ "nullsNotDistinct": false,
+ "columns": [
+ "handle"
+ ]
+ }
+ },
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.termix_identity_ca": {
+ "name": "termix_identity_ca",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "identity_id": {
+ "name": "identity_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "public_key": {
+ "name": "public_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "private_key": {
+ "name": "private_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "validity_days": {
+ "name": "validity_days",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "default": 90
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "termix_identity_ca_identity_id_termix_identities_id_fk": {
+ "name": "termix_identity_ca_identity_id_termix_identities_id_fk",
+ "tableFrom": "termix_identity_ca",
+ "tableTo": "termix_identities",
+ "columnsFrom": [
+ "identity_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "termix_identity_ca_user_id_users_id_fk": {
+ "name": "termix_identity_ca_user_id_users_id_fk",
+ "tableFrom": "termix_identity_ca",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {
+ "termix_identity_ca_identity_id_unique": {
+ "name": "termix_identity_ca_identity_id_unique",
+ "nullsNotDistinct": false,
+ "columns": [
+ "identity_id"
+ ]
+ }
+ },
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.termix_identity_keys": {
+ "name": "termix_identity_keys",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "identity_id": {
+ "name": "identity_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "public_key": {
+ "name": "public_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "key_type": {
+ "name": "key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "algorithm": {
+ "name": "algorithm",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "label": {
+ "name": "label",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "comment": {
+ "name": "comment",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "source": {
+ "name": "source",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'manual'"
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "enabled": {
+ "name": "enabled",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": true
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "termix_identity_keys_identity_id_termix_identities_id_fk": {
+ "name": "termix_identity_keys_identity_id_termix_identities_id_fk",
+ "tableFrom": "termix_identity_keys",
+ "tableTo": "termix_identities",
+ "columnsFrom": [
+ "identity_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "termix_identity_keys_user_id_users_id_fk": {
+ "name": "termix_identity_keys_user_id_users_id_fk",
+ "tableFrom": "termix_identity_keys",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "termix_identity_keys_credential_id_ssh_credentials_id_fk": {
+ "name": "termix_identity_keys_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "termix_identity_keys",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.tmux_session_tags": {
+ "name": "tmux_session_tags",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "session_name": {
+ "name": "session_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "tag": {
+ "name": "tag",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "tmux_session_tags_user_id_users_id_fk": {
+ "name": "tmux_session_tags_user_id_users_id_fk",
+ "tableFrom": "tmux_session_tags",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "tmux_session_tags_host_id_ssh_data_id_fk": {
+ "name": "tmux_session_tags_host_id_ssh_data_id_fk",
+ "tableFrom": "tmux_session_tags",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.transfer_recent": {
+ "name": "transfer_recent",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "source_host_id": {
+ "name": "source_host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "dest_host_id": {
+ "name": "dest_host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "dest_path": {
+ "name": "dest_path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "dest_path_label": {
+ "name": "dest_path_label",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "last_used": {
+ "name": "last_used",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_transfer_recent_user": {
+ "name": "idx_transfer_recent_user",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "transfer_recent_user_id_users_id_fk": {
+ "name": "transfer_recent_user_id_users_id_fk",
+ "tableFrom": "transfer_recent",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "transfer_recent_source_host_id_ssh_data_id_fk": {
+ "name": "transfer_recent_source_host_id_ssh_data_id_fk",
+ "tableFrom": "transfer_recent",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "source_host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "transfer_recent_dest_host_id_ssh_data_id_fk": {
+ "name": "transfer_recent_dest_host_id_ssh_data_id_fk",
+ "tableFrom": "transfer_recent",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "dest_host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.trusted_devices": {
+ "name": "trusted_devices",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "device_fingerprint": {
+ "name": "device_fingerprint",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "device_type": {
+ "name": "device_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "device_info": {
+ "name": "device_info",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "last_used_at": {
+ "name": "last_used_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_trusted_devices_user_id": {
+ "name": "idx_trusted_devices_user_id",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "trusted_devices_user_id_users_id_fk": {
+ "name": "trusted_devices_user_id_users_id_fk",
+ "tableFrom": "trusted_devices",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.ui_preferences": {
+ "name": "ui_preferences",
+ "schema": "",
+ "columns": {
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "data": {
+ "name": "data",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "ui_preferences_user_id_users_id_fk": {
+ "name": "ui_preferences_user_id_users_id_fk",
+ "tableFrom": "ui_preferences",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.user_external_identities": {
+ "name": "user_external_identities",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "provider_id": {
+ "name": "provider_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "subject": {
+ "name": "subject",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "email": {
+ "name": "email",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_user_external_identities_provider_subject": {
+ "name": "idx_user_external_identities_provider_subject",
+ "columns": [
+ {
+ "expression": "provider_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "subject",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_user_external_identities_user": {
+ "name": "idx_user_external_identities_user",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "user_external_identities_user_id_users_id_fk": {
+ "name": "user_external_identities_user_id_users_id_fk",
+ "tableFrom": "user_external_identities",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.user_open_tabs": {
+ "name": "user_open_tabs",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "tab_type": {
+ "name": "tab_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "label": {
+ "name": "label",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "tab_order": {
+ "name": "tab_order",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "default": 0
+ },
+ "backend_session_id": {
+ "name": "backend_session_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_user_open_tabs_user_id": {
+ "name": "idx_user_open_tabs_user_id",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "user_open_tabs_user_id_users_id_fk": {
+ "name": "user_open_tabs_user_id_users_id_fk",
+ "tableFrom": "user_open_tabs",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "user_open_tabs_host_id_ssh_data_id_fk": {
+ "name": "user_open_tabs_host_id_ssh_data_id_fk",
+ "tableFrom": "user_open_tabs",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.user_preferences": {
+ "name": "user_preferences",
+ "schema": "",
+ "columns": {
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "reopen_tabs_on_login": {
+ "name": "reopen_tabs_on_login",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "theme": {
+ "name": "theme",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "font_size": {
+ "name": "font_size",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "accent_color": {
+ "name": "accent_color",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "language": {
+ "name": "language",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "storage_mode": {
+ "name": "storage_mode",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "command_autocomplete": {
+ "name": "command_autocomplete",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "command_palette_enabled": {
+ "name": "command_palette_enabled",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "show_host_tags": {
+ "name": "show_host_tags",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "host_tray_on_click": {
+ "name": "host_tray_on_click",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "pin_app_rail": {
+ "name": "pin_app_rail",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "expand_app_rail_on_hover": {
+ "name": "expand_app_rail_on_hover",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "show_pin_app_rail_button": {
+ "name": "show_pin_app_rail_button",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "folders_collapsed": {
+ "name": "folders_collapsed",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "confirm_snippet_execution": {
+ "name": "confirm_snippet_execution",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "disable_update_check": {
+ "name": "disable_update_check",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "confirm_tab_close": {
+ "name": "confirm_tab_close",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "hidden_rail_tabs": {
+ "name": "hidden_rail_tabs",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "ai_assistant_enabled": {
+ "name": "ai_assistant_enabled",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "ai_read_only_commands": {
+ "name": "ai_read_only_commands",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "compact_host_view": {
+ "name": "compact_host_view",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "status_color_scheme": {
+ "name": "status_color_scheme",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "custom_themes": {
+ "name": "custom_themes",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "custom_keybindings": {
+ "name": "custom_keybindings",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "terminal_defaults": {
+ "name": "terminal_defaults",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "rdp_defaults": {
+ "name": "rdp_defaults",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "terminal_macros": {
+ "name": "terminal_macros",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "user_preferences_user_id_users_id_fk": {
+ "name": "user_preferences_user_id_users_id_fk",
+ "tableFrom": "user_preferences",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.user_roles": {
+ "name": "user_roles",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "role_id": {
+ "name": "role_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "granted_by": {
+ "name": "granted_by",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "granted_at": {
+ "name": "granted_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_user_roles_user_role": {
+ "name": "idx_user_roles_user_role",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "role_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ },
+ "idx_user_roles_role_id": {
+ "name": "idx_user_roles_role_id",
+ "columns": [
+ {
+ "expression": "role_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "user_roles_user_id_users_id_fk": {
+ "name": "user_roles_user_id_users_id_fk",
+ "tableFrom": "user_roles",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "user_roles_role_id_roles_id_fk": {
+ "name": "user_roles_role_id_roles_id_fk",
+ "tableFrom": "user_roles",
+ "tableTo": "roles",
+ "columnsFrom": [
+ "role_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "user_roles_granted_by_users_id_fk": {
+ "name": "user_roles_granted_by_users_id_fk",
+ "tableFrom": "user_roles",
+ "tableTo": "users",
+ "columnsFrom": [
+ "granted_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.user_second_factors": {
+ "name": "user_second_factors",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "factor_id": {
+ "name": "factor_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "enrolled_at": {
+ "name": "enrolled_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_user_second_factors_user_factor": {
+ "name": "idx_user_second_factors_user_factor",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "plugin_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "factor_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "user_second_factors_user_id_users_id_fk": {
+ "name": "user_second_factors_user_id_users_id_fk",
+ "tableFrom": "user_second_factors",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.user_workspaces": {
+ "name": "user_workspaces",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "color": {
+ "name": "color",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "icon": {
+ "name": "icon",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "kind": {
+ "name": "kind",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'manual'"
+ },
+ "is_default": {
+ "name": "is_default",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "payload": {
+ "name": "payload",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'{}'"
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "last_used_at": {
+ "name": "last_used_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ }
+ },
+ "indexes": {
+ "idx_user_workspaces_user_id": {
+ "name": "idx_user_workspaces_user_id",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": false,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "user_workspaces_user_id_users_id_fk": {
+ "name": "user_workspaces_user_id_users_id_fk",
+ "tableFrom": "user_workspaces",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {
+ "user_workspaces_sync_id_unique": {
+ "name": "user_workspaces_sync_id_unique",
+ "nullsNotDistinct": false,
+ "columns": [
+ "sync_id"
+ ]
+ }
+ },
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.users": {
+ "name": "users",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "username": {
+ "name": "username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "password_hash": {
+ "name": "password_hash",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "is_admin": {
+ "name": "is_admin",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "is_oidc": {
+ "name": "is_oidc",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "oidc_identifier": {
+ "name": "oidc_identifier",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "sso_provider_id": {
+ "name": "sso_provider_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "client_id": {
+ "name": "client_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "client_secret": {
+ "name": "client_secret",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "issuer_url": {
+ "name": "issuer_url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "authorization_url": {
+ "name": "authorization_url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "token_url": {
+ "name": "token_url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "identifier_path": {
+ "name": "identifier_path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "name_path": {
+ "name": "name_path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "scopes": {
+ "name": "scopes",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "default": "'openid email profile'"
+ },
+ "totp_secret": {
+ "name": "totp_secret",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "totp_enabled": {
+ "name": "totp_enabled",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "totp_backup_codes": {
+ "name": "totp_backup_codes",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "registered_at": {
+ "name": "registered_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "donation_modal_dismissed": {
+ "name": "donation_modal_dismissed",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {},
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.vault_profiles": {
+ "name": "vault_profiles",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "folder": {
+ "name": "folder",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "tags": {
+ "name": "tags",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "vault_addr": {
+ "name": "vault_addr",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "vault_namespace": {
+ "name": "vault_namespace",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "oidc_mount": {
+ "name": "oidc_mount",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "oidc_role": {
+ "name": "oidc_role",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "ssh_mount": {
+ "name": "ssh_mount",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "ssh_role": {
+ "name": "ssh_role",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "valid_principals": {
+ "name": "valid_principals",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "key_type": {
+ "name": "key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "shared": {
+ "name": "shared",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "vault_profiles_user_id_users_id_fk": {
+ "name": "vault_profiles_user_id_users_id_fk",
+ "tableFrom": "vault_profiles",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {
+ "vault_profiles_sync_id_unique": {
+ "name": "vault_profiles_sync_id_unique",
+ "nullsNotDistinct": false,
+ "columns": [
+ "sync_id"
+ ]
+ }
+ },
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.vault_tokens": {
+ "name": "vault_tokens",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "serial",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "profile_id": {
+ "name": "profile_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "ssh_cert": {
+ "name": "ssh_cert",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "private_key": {
+ "name": "private_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "last_used": {
+ "name": "last_used",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ }
+ },
+ "indexes": {
+ "idx_vault_tokens_user_profile": {
+ "name": "idx_vault_tokens_user_profile",
+ "columns": [
+ {
+ "expression": "user_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ },
+ {
+ "expression": "profile_id",
+ "isExpression": false,
+ "asc": true,
+ "nulls": "last"
+ }
+ ],
+ "isUnique": true,
+ "concurrently": false,
+ "method": "btree",
+ "with": {}
+ }
+ },
+ "foreignKeys": {
+ "vault_tokens_user_id_users_id_fk": {
+ "name": "vault_tokens_user_id_users_id_fk",
+ "tableFrom": "vault_tokens",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "vault_tokens_profile_id_vault_profiles_id_fk": {
+ "name": "vault_tokens_profile_id_vault_profiles_id_fk",
+ "tableFrom": "vault_tokens",
+ "tableTo": "vault_profiles",
+ "columnsFrom": [
+ "profile_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ },
+ "public.webauthn_credentials": {
+ "name": "webauthn_credentials",
+ "schema": "",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "varchar(255)",
+ "primaryKey": true,
+ "notNull": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "name": {
+ "name": "name",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "public_key": {
+ "name": "public_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true
+ },
+ "counter": {
+ "name": "counter",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "default": 0
+ },
+ "device_type": {
+ "name": "device_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "backed_up": {
+ "name": "backed_up",
+ "type": "boolean",
+ "primaryKey": false,
+ "notNull": true,
+ "default": false
+ },
+ "transports": {
+ "name": "transports",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ },
+ "user_verification": {
+ "name": "user_verification",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "'preferred'"
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "varchar(255)",
+ "primaryKey": false,
+ "notNull": true,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "last_used_at": {
+ "name": "last_used_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "webauthn_credentials_user_id_users_id_fk": {
+ "name": "webauthn_credentials_user_id_users_id_fk",
+ "tableFrom": "webauthn_credentials",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "policies": {},
+ "checkConstraints": {},
+ "isRLSEnabled": false
+ }
+ },
+ "enums": {},
+ "schemas": {},
+ "sequences": {},
+ "roles": {},
+ "policies": {},
+ "views": {},
+ "_meta": {
+ "columns": {},
+ "schemas": {},
+ "tables": {}
+ }
+}
\ No newline at end of file
diff --git a/drizzle/postgres/meta/_journal.json b/drizzle/postgres/meta/_journal.json
index d1cbcf31c..f62ca113d 100644
--- a/drizzle/postgres/meta/_journal.json
+++ b/drizzle/postgres/meta/_journal.json
@@ -218,6 +218,13 @@
"when": 1790118360674,
"tag": "0030_cynical_callisto",
"breakpoints": true
+ },
+ {
+ "idx": 31,
+ "version": "7",
+ "when": 1790135163099,
+ "tag": "0031_nifty_sentry",
+ "breakpoints": true
}
]
}
\ No newline at end of file
diff --git a/drizzle/sqlite/0027_luxuriant_cargill.sql b/drizzle/sqlite/0027_luxuriant_cargill.sql
new file mode 100644
index 000000000..fb7eaeb57
--- /dev/null
+++ b/drizzle/sqlite/0027_luxuriant_cargill.sql
@@ -0,0 +1,22 @@
+CREATE TABLE `user_external_identities` (
+ `id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+ `user_id` text NOT NULL,
+ `provider_id` text NOT NULL,
+ `subject` text NOT NULL,
+ `email` text,
+ `created_at` text DEFAULT CURRENT_TIMESTAMP NOT NULL,
+ FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `idx_user_external_identities_provider_subject` ON `user_external_identities` (`provider_id`,`subject`);--> statement-breakpoint
+CREATE INDEX `idx_user_external_identities_user` ON `user_external_identities` (`user_id`);--> statement-breakpoint
+CREATE TABLE `user_second_factors` (
+ `id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+ `user_id` text NOT NULL,
+ `plugin_id` text NOT NULL,
+ `factor_id` text NOT NULL,
+ `enrolled_at` text DEFAULT CURRENT_TIMESTAMP NOT NULL,
+ FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `idx_user_second_factors_user_factor` ON `user_second_factors` (`user_id`,`plugin_id`,`factor_id`);
\ No newline at end of file
diff --git a/drizzle/sqlite/meta/0027_snapshot.json b/drizzle/sqlite/meta/0027_snapshot.json
new file mode 100644
index 000000000..307224e2b
--- /dev/null
+++ b/drizzle/sqlite/meta/0027_snapshot.json
@@ -0,0 +1,9636 @@
+{
+ "version": "6",
+ "dialect": "sqlite",
+ "id": "1de881ee-a464-4b27-8084-90a13688bfa8",
+ "prevId": "50b36b42-89b2-4526-aea9-d9c5363cbacd",
+ "tables": {
+ "ai_conversations": {
+ "name": "ai_conversations",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "title": {
+ "name": "title",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "provider_id": {
+ "name": "provider_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "model": {
+ "name": "model",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_ai_conversations_user": {
+ "name": "idx_ai_conversations_user",
+ "columns": [
+ "user_id",
+ "updated_at"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "ai_conversations_user_id_users_id_fk": {
+ "name": "ai_conversations_user_id_users_id_fk",
+ "tableFrom": "ai_conversations",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "ai_messages": {
+ "name": "ai_messages",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "conversation_id": {
+ "name": "conversation_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "role": {
+ "name": "role",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "content": {
+ "name": "content",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "''"
+ },
+ "tool_calls": {
+ "name": "tool_calls",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_ai_messages_conversation": {
+ "name": "idx_ai_messages_conversation",
+ "columns": [
+ "conversation_id",
+ "created_at"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "ai_messages_conversation_id_ai_conversations_id_fk": {
+ "name": "ai_messages_conversation_id_ai_conversations_id_fk",
+ "tableFrom": "ai_messages",
+ "tableTo": "ai_conversations",
+ "columnsFrom": [
+ "conversation_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "ai_proposals": {
+ "name": "ai_proposals",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "conversation_id": {
+ "name": "conversation_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "kind": {
+ "name": "kind",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "summary": {
+ "name": "summary",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "payload": {
+ "name": "payload",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'{}'"
+ },
+ "status": {
+ "name": "status",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'pending'"
+ },
+ "applied_at": {
+ "name": "applied_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "result_summary": {
+ "name": "result_summary",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_ai_proposals_user": {
+ "name": "idx_ai_proposals_user",
+ "columns": [
+ "user_id",
+ "status"
+ ],
+ "isUnique": false
+ },
+ "idx_ai_proposals_conversation": {
+ "name": "idx_ai_proposals_conversation",
+ "columns": [
+ "conversation_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "ai_proposals_conversation_id_ai_conversations_id_fk": {
+ "name": "ai_proposals_conversation_id_ai_conversations_id_fk",
+ "tableFrom": "ai_proposals",
+ "tableTo": "ai_conversations",
+ "columnsFrom": [
+ "conversation_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "ai_proposals_user_id_users_id_fk": {
+ "name": "ai_proposals_user_id_users_id_fk",
+ "tableFrom": "ai_proposals",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "ai_providers": {
+ "name": "ai_providers",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "provider_type": {
+ "name": "provider_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "label": {
+ "name": "label",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "base_url": {
+ "name": "base_url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "api_key": {
+ "name": "api_key",
+ "type": "text(8192)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "api_key_prefix": {
+ "name": "api_key_prefix",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "default_model": {
+ "name": "default_model",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "enabled": {
+ "name": "enabled",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_ai_providers_user_label": {
+ "name": "idx_ai_providers_user_label",
+ "columns": [
+ "user_id",
+ "label"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "ai_providers_user_id_users_id_fk": {
+ "name": "ai_providers_user_id_users_id_fk",
+ "tableFrom": "ai_providers",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "api_keys": {
+ "name": "api_keys",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "text",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "token_hash": {
+ "name": "token_hash",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "token_prefix": {
+ "name": "token_prefix",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "last_used_at": {
+ "name": "last_used_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "is_active": {
+ "name": "is_active",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ }
+ },
+ "indexes": {
+ "idx_api_keys_user_id": {
+ "name": "idx_api_keys_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "api_keys_user_id_users_id_fk": {
+ "name": "api_keys_user_id_users_id_fk",
+ "tableFrom": "api_keys",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "audit_logs": {
+ "name": "audit_logs",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "username": {
+ "name": "username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "action": {
+ "name": "action",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "resource_type": {
+ "name": "resource_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "resource_id": {
+ "name": "resource_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "resource_name": {
+ "name": "resource_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "details": {
+ "name": "details",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "ip_address": {
+ "name": "ip_address",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "user_agent": {
+ "name": "user_agent",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "success": {
+ "name": "success",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "error_message": {
+ "name": "error_message",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "timestamp": {
+ "name": "timestamp",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_audit_logs_timestamp": {
+ "name": "idx_audit_logs_timestamp",
+ "columns": [
+ "timestamp"
+ ],
+ "isUnique": false
+ },
+ "idx_audit_logs_user_ts": {
+ "name": "idx_audit_logs_user_ts",
+ "columns": [
+ "user_id",
+ "timestamp"
+ ],
+ "isUnique": false
+ },
+ "idx_audit_logs_action_ts": {
+ "name": "idx_audit_logs_action_ts",
+ "columns": [
+ "action",
+ "timestamp"
+ ],
+ "isUnique": false
+ },
+ "idx_audit_logs_resource_ts": {
+ "name": "idx_audit_logs_resource_ts",
+ "columns": [
+ "resource_type",
+ "timestamp"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "audit_logs_user_id_users_id_fk": {
+ "name": "audit_logs_user_id_users_id_fk",
+ "tableFrom": "audit_logs",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "automation_channels": {
+ "name": "automation_channels",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "automation_id": {
+ "name": "automation_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "channel_id": {
+ "name": "channel_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ }
+ },
+ "indexes": {
+ "idx_automation_channels_pair": {
+ "name": "idx_automation_channels_pair",
+ "columns": [
+ "automation_id",
+ "channel_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "automation_channels_automation_id_automations_id_fk": {
+ "name": "automation_channels_automation_id_automations_id_fk",
+ "tableFrom": "automation_channels",
+ "tableTo": "automations",
+ "columnsFrom": [
+ "automation_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "automation_channels_channel_id_notification_channels_id_fk": {
+ "name": "automation_channels_channel_id_notification_channels_id_fk",
+ "tableFrom": "automation_channels",
+ "tableTo": "notification_channels",
+ "columnsFrom": [
+ "channel_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "automation_run_steps": {
+ "name": "automation_run_steps",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "run_id": {
+ "name": "run_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "step_index": {
+ "name": "step_index",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "step_id": {
+ "name": "step_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "step_type": {
+ "name": "step_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "status": {
+ "name": "status",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "started_at": {
+ "name": "started_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "finished_at": {
+ "name": "finished_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "output": {
+ "name": "output",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "error": {
+ "name": "error",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "truncated": {
+ "name": "truncated",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ }
+ },
+ "indexes": {
+ "idx_automation_run_steps_run": {
+ "name": "idx_automation_run_steps_run",
+ "columns": [
+ "run_id",
+ "step_index"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "automation_run_steps_run_id_automation_runs_id_fk": {
+ "name": "automation_run_steps_run_id_automation_runs_id_fk",
+ "tableFrom": "automation_run_steps",
+ "tableTo": "automation_runs",
+ "columnsFrom": [
+ "run_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "automation_runs": {
+ "name": "automation_runs",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "automation_id": {
+ "name": "automation_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "trigger_type": {
+ "name": "trigger_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "trigger_context": {
+ "name": "trigger_context",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "status": {
+ "name": "status",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "started_at": {
+ "name": "started_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "finished_at": {
+ "name": "finished_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "duration_ms": {
+ "name": "duration_ms",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "error": {
+ "name": "error",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "dry_run": {
+ "name": "dry_run",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "parent_run_id": {
+ "name": "parent_run_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {
+ "idx_automation_runs_automation": {
+ "name": "idx_automation_runs_automation",
+ "columns": [
+ "automation_id",
+ "started_at"
+ ],
+ "isUnique": false
+ },
+ "idx_automation_runs_user": {
+ "name": "idx_automation_runs_user",
+ "columns": [
+ "user_id",
+ "started_at"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "automation_runs_automation_id_automations_id_fk": {
+ "name": "automation_runs_automation_id_automations_id_fk",
+ "tableFrom": "automation_runs",
+ "tableTo": "automations",
+ "columnsFrom": [
+ "automation_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "automation_runs_user_id_users_id_fk": {
+ "name": "automation_runs_user_id_users_id_fk",
+ "tableFrom": "automation_runs",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "automation_schedules": {
+ "name": "automation_schedules",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "automation_id": {
+ "name": "automation_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "cron": {
+ "name": "cron",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "interval_seconds": {
+ "name": "interval_seconds",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "timezone": {
+ "name": "timezone",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "next_due_at": {
+ "name": "next_due_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "last_tick_at": {
+ "name": "last_tick_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {
+ "idx_automation_schedules_automation": {
+ "name": "idx_automation_schedules_automation",
+ "columns": [
+ "automation_id"
+ ],
+ "isUnique": true
+ },
+ "idx_automation_schedules_due": {
+ "name": "idx_automation_schedules_due",
+ "columns": [
+ "next_due_at"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "automation_schedules_automation_id_automations_id_fk": {
+ "name": "automation_schedules_automation_id_automations_id_fk",
+ "tableFrom": "automation_schedules",
+ "tableTo": "automations",
+ "columnsFrom": [
+ "automation_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "automation_trigger_state": {
+ "name": "automation_trigger_state",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "automation_id": {
+ "name": "automation_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "state_key": {
+ "name": "state_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "breach_started_at": {
+ "name": "breach_started_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "last_fired_at": {
+ "name": "last_fired_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "last_value": {
+ "name": "last_value",
+ "type": "real",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "last_observed_state": {
+ "name": "last_observed_state",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_automation_trigger_state_key": {
+ "name": "idx_automation_trigger_state_key",
+ "columns": [
+ "automation_id",
+ "state_key"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "automation_trigger_state_automation_id_automations_id_fk": {
+ "name": "automation_trigger_state_automation_id_automations_id_fk",
+ "tableFrom": "automation_trigger_state",
+ "tableTo": "automations",
+ "columnsFrom": [
+ "automation_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "automations": {
+ "name": "automations",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "enabled": {
+ "name": "enabled",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "definition": {
+ "name": "definition",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "definition_version": {
+ "name": "definition_version",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 1
+ },
+ "concurrency_policy": {
+ "name": "concurrency_policy",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'skip'"
+ },
+ "max_run_seconds": {
+ "name": "max_run_seconds",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 300
+ },
+ "dry_run": {
+ "name": "dry_run",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "last_run_at": {
+ "name": "last_run_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "last_run_status": {
+ "name": "last_run_status",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_automations_user": {
+ "name": "idx_automations_user",
+ "columns": [
+ "user_id",
+ "enabled"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "automations_user_id_users_id_fk": {
+ "name": "automations_user_id_users_id_fk",
+ "tableFrom": "automations",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "c2s_tunnel_presets": {
+ "name": "c2s_tunnel_presets",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "config": {
+ "name": "config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "platform": {
+ "name": "platform",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "computer_name": {
+ "name": "computer_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "c2s_tunnel_presets_user_id_users_id_fk": {
+ "name": "c2s_tunnel_presets_user_id_users_id_fk",
+ "tableFrom": "c2s_tunnel_presets",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "collab_room_members": {
+ "name": "collab_room_members",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "room_id": {
+ "name": "room_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "room_role": {
+ "name": "room_role",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'member'"
+ },
+ "added_by": {
+ "name": "added_by",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_collab_room_members_room_user": {
+ "name": "idx_collab_room_members_room_user",
+ "columns": [
+ "room_id",
+ "user_id"
+ ],
+ "isUnique": true
+ },
+ "idx_collab_room_members_user": {
+ "name": "idx_collab_room_members_user",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "collab_room_members_room_id_collab_rooms_id_fk": {
+ "name": "collab_room_members_room_id_collab_rooms_id_fk",
+ "tableFrom": "collab_room_members",
+ "tableTo": "collab_rooms",
+ "columnsFrom": [
+ "room_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "collab_room_members_user_id_users_id_fk": {
+ "name": "collab_room_members_user_id_users_id_fk",
+ "tableFrom": "collab_room_members",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "collab_room_members_added_by_users_id_fk": {
+ "name": "collab_room_members_added_by_users_id_fk",
+ "tableFrom": "collab_room_members",
+ "tableTo": "users",
+ "columnsFrom": [
+ "added_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "collab_rooms": {
+ "name": "collab_rooms",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "text",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "owner_user_id": {
+ "name": "owner_user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "persistent": {
+ "name": "persistent",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "presenter_user_id": {
+ "name": "presenter_user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "stage_protocol": {
+ "name": "stage_protocol",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "stage_host_id": {
+ "name": "stage_host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "stage_share_id": {
+ "name": "stage_share_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "guest_link_token": {
+ "name": "guest_link_token",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "ended_at": {
+ "name": "ended_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {
+ "idx_collab_rooms_owner": {
+ "name": "idx_collab_rooms_owner",
+ "columns": [
+ "owner_user_id"
+ ],
+ "isUnique": false
+ },
+ "idx_collab_rooms_guest_token": {
+ "name": "idx_collab_rooms_guest_token",
+ "columns": [
+ "guest_link_token"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "collab_rooms_owner_user_id_users_id_fk": {
+ "name": "collab_rooms_owner_user_id_users_id_fk",
+ "tableFrom": "collab_rooms",
+ "tableTo": "users",
+ "columnsFrom": [
+ "owner_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "collab_rooms_presenter_user_id_users_id_fk": {
+ "name": "collab_rooms_presenter_user_id_users_id_fk",
+ "tableFrom": "collab_rooms",
+ "tableTo": "users",
+ "columnsFrom": [
+ "presenter_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "collab_rooms_stage_host_id_ssh_data_id_fk": {
+ "name": "collab_rooms_stage_host_id_ssh_data_id_fk",
+ "tableFrom": "collab_rooms",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "stage_host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "collab_rooms_stage_share_id_session_shares_id_fk": {
+ "name": "collab_rooms_stage_share_id_session_shares_id_fk",
+ "tableFrom": "collab_rooms",
+ "tableTo": "session_shares",
+ "columnsFrom": [
+ "stage_share_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "command_history": {
+ "name": "command_history",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "command": {
+ "name": "command",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "executed_at": {
+ "name": "executed_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_command_history_user_host": {
+ "name": "idx_command_history_user_host",
+ "columns": [
+ "user_id",
+ "host_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "command_history_user_id_users_id_fk": {
+ "name": "command_history_user_id_users_id_fk",
+ "tableFrom": "command_history",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "command_history_host_id_ssh_data_id_fk": {
+ "name": "command_history_host_id_ssh_data_id_fk",
+ "tableFrom": "command_history",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "credential_access": {
+ "name": "credential_access",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "role_id": {
+ "name": "role_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "granted_by": {
+ "name": "granted_by",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "permission_level": {
+ "name": "permission_level",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'use'"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_credential_access_user_id": {
+ "name": "idx_credential_access_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ },
+ "idx_credential_access_role_id": {
+ "name": "idx_credential_access_role_id",
+ "columns": [
+ "role_id"
+ ],
+ "isUnique": false
+ },
+ "idx_credential_access_credential_id": {
+ "name": "idx_credential_access_credential_id",
+ "columns": [
+ "credential_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "credential_access_credential_id_ssh_credentials_id_fk": {
+ "name": "credential_access_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "credential_access",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "credential_access_user_id_users_id_fk": {
+ "name": "credential_access_user_id_users_id_fk",
+ "tableFrom": "credential_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "credential_access_role_id_roles_id_fk": {
+ "name": "credential_access_role_id_roles_id_fk",
+ "tableFrom": "credential_access",
+ "tableTo": "roles",
+ "columnsFrom": [
+ "role_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "credential_access_granted_by_users_id_fk": {
+ "name": "credential_access_granted_by_users_id_fk",
+ "tableFrom": "credential_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "granted_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "credential_sidebar_preferences": {
+ "name": "credential_sidebar_preferences",
+ "columns": {
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "data": {
+ "name": "data",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "credential_sidebar_preferences_user_id_users_id_fk": {
+ "name": "credential_sidebar_preferences_user_id_users_id_fk",
+ "tableFrom": "credential_sidebar_preferences",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "dashboard_service_links": {
+ "name": "dashboard_service_links",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "label": {
+ "name": "label",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "url": {
+ "name": "url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "order": {
+ "name": "order",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 0
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "dashboard_service_links_sync_id_unique": {
+ "name": "dashboard_service_links_sync_id_unique",
+ "columns": [
+ "sync_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "dashboard_service_links_user_id_users_id_fk": {
+ "name": "dashboard_service_links_user_id_users_id_fk",
+ "tableFrom": "dashboard_service_links",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "dismissed_alerts": {
+ "name": "dismissed_alerts",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "alert_id": {
+ "name": "alert_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "dismissed_at": {
+ "name": "dismissed_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_dismissed_alerts_user_id": {
+ "name": "idx_dismissed_alerts_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "dismissed_alerts_user_id_users_id_fk": {
+ "name": "dismissed_alerts_user_id_users_id_fk",
+ "tableFrom": "dismissed_alerts",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "file_manager_pinned": {
+ "name": "file_manager_pinned",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "path": {
+ "name": "path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "pinned_at": {
+ "name": "pinned_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_file_manager_pinned_user": {
+ "name": "idx_file_manager_pinned_user",
+ "columns": [
+ "user_id",
+ "host_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "file_manager_pinned_user_id_users_id_fk": {
+ "name": "file_manager_pinned_user_id_users_id_fk",
+ "tableFrom": "file_manager_pinned",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "file_manager_pinned_host_id_ssh_data_id_fk": {
+ "name": "file_manager_pinned_host_id_ssh_data_id_fk",
+ "tableFrom": "file_manager_pinned",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "file_manager_recent": {
+ "name": "file_manager_recent",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "path": {
+ "name": "path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "last_opened": {
+ "name": "last_opened",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_file_manager_recent_user": {
+ "name": "idx_file_manager_recent_user",
+ "columns": [
+ "user_id",
+ "host_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "file_manager_recent_user_id_users_id_fk": {
+ "name": "file_manager_recent_user_id_users_id_fk",
+ "tableFrom": "file_manager_recent",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "file_manager_recent_host_id_ssh_data_id_fk": {
+ "name": "file_manager_recent_host_id_ssh_data_id_fk",
+ "tableFrom": "file_manager_recent",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "file_manager_shortcuts": {
+ "name": "file_manager_shortcuts",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "path": {
+ "name": "path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_file_manager_shortcuts_user": {
+ "name": "idx_file_manager_shortcuts_user",
+ "columns": [
+ "user_id",
+ "host_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "file_manager_shortcuts_user_id_users_id_fk": {
+ "name": "file_manager_shortcuts_user_id_users_id_fk",
+ "tableFrom": "file_manager_shortcuts",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "file_manager_shortcuts_host_id_ssh_data_id_fk": {
+ "name": "file_manager_shortcuts_host_id_ssh_data_id_fk",
+ "tableFrom": "file_manager_shortcuts",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "fleet_inventory": {
+ "name": "fleet_inventory",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "os_pretty_name": {
+ "name": "os_pretty_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "kernel": {
+ "name": "kernel",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "architecture": {
+ "name": "architecture",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "hostname": {
+ "name": "hostname",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "uptime_seconds": {
+ "name": "uptime_seconds",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "ip": {
+ "name": "ip",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "package_manager": {
+ "name": "package_manager",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "collected_at": {
+ "name": "collected_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_fleet_inventory_host": {
+ "name": "idx_fleet_inventory_host",
+ "columns": [
+ "host_id",
+ "user_id"
+ ],
+ "isUnique": true
+ },
+ "idx_fleet_inventory_user": {
+ "name": "idx_fleet_inventory_user",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "fleet_inventory_host_id_ssh_data_id_fk": {
+ "name": "fleet_inventory_host_id_ssh_data_id_fk",
+ "tableFrom": "fleet_inventory",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "fleet_inventory_user_id_users_id_fk": {
+ "name": "fleet_inventory_user_id_users_id_fk",
+ "tableFrom": "fleet_inventory",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "fleet_members": {
+ "name": "fleet_members",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "fleet_id": {
+ "name": "fleet_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "added_at": {
+ "name": "added_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_fleet_members_fleet_host": {
+ "name": "idx_fleet_members_fleet_host",
+ "columns": [
+ "fleet_id",
+ "host_id"
+ ],
+ "isUnique": true
+ },
+ "idx_fleet_members_host": {
+ "name": "idx_fleet_members_host",
+ "columns": [
+ "host_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "fleet_members_fleet_id_fleets_id_fk": {
+ "name": "fleet_members_fleet_id_fleets_id_fk",
+ "tableFrom": "fleet_members",
+ "tableTo": "fleets",
+ "columnsFrom": [
+ "fleet_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "fleet_members_host_id_ssh_data_id_fk": {
+ "name": "fleet_members_host_id_ssh_data_id_fk",
+ "tableFrom": "fleet_members",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "fleets": {
+ "name": "fleets",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "color": {
+ "name": "color",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "icon": {
+ "name": "icon",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "tag_rules": {
+ "name": "tag_rules",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "fleets_sync_id_unique": {
+ "name": "fleets_sync_id_unique",
+ "columns": [
+ "sync_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "fleets_user_id_users_id_fk": {
+ "name": "fleets_user_id_users_id_fk",
+ "tableFrom": "fleets",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "folder_access": {
+ "name": "folder_access",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "owner_user_id": {
+ "name": "owner_user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "folder": {
+ "name": "folder",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "role_id": {
+ "name": "role_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "granted_by": {
+ "name": "granted_by",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "permission_level": {
+ "name": "permission_level",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'connect'"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_folder_access_owner_folder": {
+ "name": "idx_folder_access_owner_folder",
+ "columns": [
+ "owner_user_id",
+ "folder"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "folder_access_owner_user_id_users_id_fk": {
+ "name": "folder_access_owner_user_id_users_id_fk",
+ "tableFrom": "folder_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "owner_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "folder_access_user_id_users_id_fk": {
+ "name": "folder_access_user_id_users_id_fk",
+ "tableFrom": "folder_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "folder_access_role_id_roles_id_fk": {
+ "name": "folder_access_role_id_roles_id_fk",
+ "tableFrom": "folder_access",
+ "tableTo": "roles",
+ "columnsFrom": [
+ "role_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "folder_access_granted_by_users_id_fk": {
+ "name": "folder_access_granted_by_users_id_fk",
+ "tableFrom": "folder_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "granted_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "homepage_items": {
+ "name": "homepage_items",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "type_id": {
+ "name": "type_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "title": {
+ "name": "title",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "config": {
+ "name": "config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'{}'"
+ },
+ "folder_id": {
+ "name": "folder_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "homepage_items_sync_id_unique": {
+ "name": "homepage_items_sync_id_unique",
+ "columns": [
+ "sync_id"
+ ],
+ "isUnique": true
+ },
+ "idx_homepage_items_user_id": {
+ "name": "idx_homepage_items_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "homepage_items_user_id_users_id_fk": {
+ "name": "homepage_items_user_id_users_id_fk",
+ "tableFrom": "homepage_items",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "homepage_layouts": {
+ "name": "homepage_layouts",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "layout": {
+ "name": "layout",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'{}'"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "homepage_layouts_user_id_unique": {
+ "name": "homepage_layouts_user_id_unique",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "homepage_layouts_user_id_users_id_fk": {
+ "name": "homepage_layouts_user_id_users_id_fk",
+ "tableFrom": "homepage_layouts",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "host_access": {
+ "name": "host_access",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "role_id": {
+ "name": "role_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "granted_by": {
+ "name": "granted_by",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "permission_level": {
+ "name": "permission_level",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'connect'"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "last_accessed_at": {
+ "name": "last_accessed_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "access_count": {
+ "name": "access_count",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 0
+ }
+ },
+ "indexes": {
+ "idx_host_access_user_id": {
+ "name": "idx_host_access_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ },
+ "idx_host_access_role_id": {
+ "name": "idx_host_access_role_id",
+ "columns": [
+ "role_id"
+ ],
+ "isUnique": false
+ },
+ "idx_host_access_host_id": {
+ "name": "idx_host_access_host_id",
+ "columns": [
+ "host_id"
+ ],
+ "isUnique": false
+ },
+ "idx_host_access_expires_at": {
+ "name": "idx_host_access_expires_at",
+ "columns": [
+ "expires_at"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "host_access_host_id_ssh_data_id_fk": {
+ "name": "host_access_host_id_ssh_data_id_fk",
+ "tableFrom": "host_access",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "host_access_user_id_users_id_fk": {
+ "name": "host_access_user_id_users_id_fk",
+ "tableFrom": "host_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "host_access_role_id_roles_id_fk": {
+ "name": "host_access_role_id_roles_id_fk",
+ "tableFrom": "host_access",
+ "tableTo": "roles",
+ "columnsFrom": [
+ "role_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "host_access_granted_by_users_id_fk": {
+ "name": "host_access_granted_by_users_id_fk",
+ "tableFrom": "host_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "granted_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "host_health_checks": {
+ "name": "host_health_checks",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "checks": {
+ "name": "checks",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "interval_seconds": {
+ "name": "interval_seconds",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 300
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_host_health_checks_user_host": {
+ "name": "idx_host_health_checks_user_host",
+ "columns": [
+ "user_id",
+ "host_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "host_health_checks_user_id_users_id_fk": {
+ "name": "host_health_checks_user_id_users_id_fk",
+ "tableFrom": "host_health_checks",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "host_health_checks_host_id_ssh_data_id_fk": {
+ "name": "host_health_checks_host_id_ssh_data_id_fk",
+ "tableFrom": "host_health_checks",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "host_health_history": {
+ "name": "host_health_history",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "check_id": {
+ "name": "check_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "ts": {
+ "name": "ts",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "ok": {
+ "name": "ok",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "latency_ms": {
+ "name": "latency_ms",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "detail": {
+ "name": "detail",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "host_health_history_user_id_users_id_fk": {
+ "name": "host_health_history_user_id_users_id_fk",
+ "tableFrom": "host_health_history",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "host_health_history_host_id_ssh_data_id_fk": {
+ "name": "host_health_history_host_id_ssh_data_id_fk",
+ "tableFrom": "host_health_history",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "host_metrics_history": {
+ "name": "host_metrics_history",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "ts": {
+ "name": "ts",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "cpu_percent": {
+ "name": "cpu_percent",
+ "type": "real",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "mem_percent": {
+ "name": "mem_percent",
+ "type": "real",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "disk_percent": {
+ "name": "disk_percent",
+ "type": "real",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "net_rx_bytes": {
+ "name": "net_rx_bytes",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "net_tx_bytes": {
+ "name": "net_tx_bytes",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "host_metrics_history_host_id_ssh_data_id_fk": {
+ "name": "host_metrics_history_host_id_ssh_data_id_fk",
+ "tableFrom": "host_metrics_history",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "host_metrics_preferences": {
+ "name": "host_metrics_preferences",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "layout": {
+ "name": "layout",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_host_metrics_prefs_user_host": {
+ "name": "idx_host_metrics_prefs_user_host",
+ "columns": [
+ "user_id",
+ "host_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "host_metrics_preferences_user_id_users_id_fk": {
+ "name": "host_metrics_preferences_user_id_users_id_fk",
+ "tableFrom": "host_metrics_preferences",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "host_metrics_preferences_host_id_ssh_data_id_fk": {
+ "name": "host_metrics_preferences_host_id_ssh_data_id_fk",
+ "tableFrom": "host_metrics_preferences",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "host_sidebar_preferences": {
+ "name": "host_sidebar_preferences",
+ "columns": {
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "data": {
+ "name": "data",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "host_sidebar_preferences_user_id_users_id_fk": {
+ "name": "host_sidebar_preferences_user_id_users_id_fk",
+ "tableFrom": "host_sidebar_preferences",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "ssh_data": {
+ "name": "ssh_data",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "connection_type": {
+ "name": "connection_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'ssh'"
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "ip": {
+ "name": "ip",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "port": {
+ "name": "port",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "username": {
+ "name": "username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "folder": {
+ "name": "folder",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "parent_host_id": {
+ "name": "parent_host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "tags": {
+ "name": "tags",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "pin": {
+ "name": "pin",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "sort_order": {
+ "name": "sort_order",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "auth_type": {
+ "name": "auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "use_warpgate": {
+ "name": "use_warpgate",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "share_ssh_auth": {
+ "name": "share_ssh_auth",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "force_keyboard_interactive": {
+ "name": "force_keyboard_interactive",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "password": {
+ "name": "password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "key": {
+ "name": "key",
+ "type": "text(8192)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "key_password": {
+ "name": "key_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "key_type": {
+ "name": "key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "sudo_password": {
+ "name": "sudo_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "autostart_password": {
+ "name": "autostart_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "autostart_key": {
+ "name": "autostart_key",
+ "type": "text(8192)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "autostart_key_password": {
+ "name": "autostart_key_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "override_credential_username": {
+ "name": "override_credential_username",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "vault_profile_id": {
+ "name": "vault_profile_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "enable_terminal": {
+ "name": "enable_terminal",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "enable_session_logging": {
+ "name": "enable_session_logging",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "allow_session_sharing": {
+ "name": "allow_session_sharing",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "enable_command_history": {
+ "name": "enable_command_history",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "enable_tunnel": {
+ "name": "enable_tunnel",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "tunnel_connections": {
+ "name": "tunnel_connections",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "jump_hosts": {
+ "name": "jump_hosts",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "enable_file_manager": {
+ "name": "enable_file_manager",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "scp_legacy": {
+ "name": "scp_legacy",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "enable_docker": {
+ "name": "enable_docker",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "enable_web_ui": {
+ "name": "enable_web_ui",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "enable_tmux_monitor": {
+ "name": "enable_tmux_monitor",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "enable_terminal_toolbar": {
+ "name": "enable_terminal_toolbar",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "enable_ai_assistant": {
+ "name": "enable_ai_assistant",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "show_terminal_in_sidebar": {
+ "name": "show_terminal_in_sidebar",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "show_file_manager_in_sidebar": {
+ "name": "show_file_manager_in_sidebar",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "show_tunnel_in_sidebar": {
+ "name": "show_tunnel_in_sidebar",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "show_docker_in_sidebar": {
+ "name": "show_docker_in_sidebar",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "show_server_stats_in_sidebar": {
+ "name": "show_server_stats_in_sidebar",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "default_path": {
+ "name": "default_path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "stats_config": {
+ "name": "stats_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "docker_config": {
+ "name": "docker_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "web_ui_config": {
+ "name": "web_ui_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "enable_proxmox": {
+ "name": "enable_proxmox",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "proxmox_config": {
+ "name": "proxmox_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "enable_proxmox_stats": {
+ "name": "enable_proxmox_stats",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "proxmox_stats_config": {
+ "name": "proxmox_stats_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "terminal_config": {
+ "name": "terminal_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "quick_actions": {
+ "name": "quick_actions",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "notes": {
+ "name": "notes",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "enable_ssh": {
+ "name": "enable_ssh",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "enable_rdp": {
+ "name": "enable_rdp",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "enable_vnc": {
+ "name": "enable_vnc",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "enable_telnet": {
+ "name": "enable_telnet",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "ssh_port": {
+ "name": "ssh_port",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false,
+ "default": 22
+ },
+ "rdp_port": {
+ "name": "rdp_port",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false,
+ "default": 3389
+ },
+ "vnc_port": {
+ "name": "vnc_port",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false,
+ "default": 5900
+ },
+ "telnet_port": {
+ "name": "telnet_port",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false,
+ "default": 23
+ },
+ "rdp_credential_id": {
+ "name": "rdp_credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "rdp_user": {
+ "name": "rdp_user",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "rdp_password": {
+ "name": "rdp_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "rdp_domain": {
+ "name": "rdp_domain",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "rdp_security": {
+ "name": "rdp_security",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "rdp_ignore_cert": {
+ "name": "rdp_ignore_cert",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false,
+ "default": false
+ },
+ "vnc_credential_id": {
+ "name": "vnc_credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "vnc_password": {
+ "name": "vnc_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "vnc_user": {
+ "name": "vnc_user",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "telnet_user": {
+ "name": "telnet_user",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "telnet_password": {
+ "name": "telnet_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "telnet_credential_id": {
+ "name": "telnet_credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "rdp_auth_type": {
+ "name": "rdp_auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "vnc_auth_type": {
+ "name": "vnc_auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "telnet_auth_type": {
+ "name": "telnet_auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "domain": {
+ "name": "domain",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "security": {
+ "name": "security",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "ignore_cert": {
+ "name": "ignore_cert",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false,
+ "default": false
+ },
+ "guacamole_config": {
+ "name": "guacamole_config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "use_socks5": {
+ "name": "use_socks5",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "socks5_host": {
+ "name": "socks5_host",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "socks5_port": {
+ "name": "socks5_port",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "socks5_username": {
+ "name": "socks5_username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "socks5_password": {
+ "name": "socks5_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "socks5_proxy_chain": {
+ "name": "socks5_proxy_chain",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "connection_origin": {
+ "name": "connection_origin",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "mac_address": {
+ "name": "mac_address",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "wol_broadcast_address": {
+ "name": "wol_broadcast_address",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "port_knock_sequence": {
+ "name": "port_knock_sequence",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "host_key_fingerprint": {
+ "name": "host_key_fingerprint",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "host_key_type": {
+ "name": "host_key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "host_key_algorithm": {
+ "name": "host_key_algorithm",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false,
+ "default": "'sha256'"
+ },
+ "host_key_first_seen": {
+ "name": "host_key_first_seen",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "host_key_last_verified": {
+ "name": "host_key_last_verified",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "host_key_changed_count": {
+ "name": "host_key_changed_count",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false,
+ "default": 0
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "ssh_data_sync_id_unique": {
+ "name": "ssh_data_sync_id_unique",
+ "columns": [
+ "sync_id"
+ ],
+ "isUnique": true
+ },
+ "idx_ssh_data_user_id": {
+ "name": "idx_ssh_data_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ },
+ "idx_ssh_data_parent_host": {
+ "name": "idx_ssh_data_parent_host",
+ "columns": [
+ "parent_host_id"
+ ],
+ "isUnique": false
+ },
+ "idx_ssh_data_credential": {
+ "name": "idx_ssh_data_credential",
+ "columns": [
+ "credential_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "ssh_data_user_id_users_id_fk": {
+ "name": "ssh_data_user_id_users_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "ssh_data_parent_host_id_ssh_data_id_fk": {
+ "name": "ssh_data_parent_host_id_ssh_data_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "parent_host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "ssh_data_credential_id_ssh_credentials_id_fk": {
+ "name": "ssh_data_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "ssh_data_vault_profile_id_vault_profiles_id_fk": {
+ "name": "ssh_data_vault_profile_id_vault_profiles_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "vault_profiles",
+ "columnsFrom": [
+ "vault_profile_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "ssh_data_rdp_credential_id_ssh_credentials_id_fk": {
+ "name": "ssh_data_rdp_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "rdp_credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "ssh_data_vnc_credential_id_ssh_credentials_id_fk": {
+ "name": "ssh_data_vnc_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "vnc_credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "ssh_data_telnet_credential_id_ssh_credentials_id_fk": {
+ "name": "ssh_data_telnet_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "ssh_data",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "telnet_credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "network_topology": {
+ "name": "network_topology",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "topology": {
+ "name": "topology",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "network_topology_user_id_users_id_fk": {
+ "name": "network_topology_user_id_users_id_fk",
+ "tableFrom": "network_topology",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "notification_channels": {
+ "name": "notification_channels",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "type": {
+ "name": "type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "config": {
+ "name": "config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "enabled": {
+ "name": "enabled",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "notification_channels_user_id_users_id_fk": {
+ "name": "notification_channels_user_id_users_id_fk",
+ "tableFrom": "notification_channels",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "opkssh_tokens": {
+ "name": "opkssh_tokens",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "ssh_cert": {
+ "name": "ssh_cert",
+ "type": "text(8192)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "private_key": {
+ "name": "private_key",
+ "type": "text(8192)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "email": {
+ "name": "email",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "sub": {
+ "name": "sub",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "issuer": {
+ "name": "issuer",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "audience": {
+ "name": "audience",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "last_used": {
+ "name": "last_used",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {
+ "idx_opkssh_tokens_user_host": {
+ "name": "idx_opkssh_tokens_user_host",
+ "columns": [
+ "user_id",
+ "host_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "opkssh_tokens_user_id_users_id_fk": {
+ "name": "opkssh_tokens_user_id_users_id_fk",
+ "tableFrom": "opkssh_tokens",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "opkssh_tokens_host_id_ssh_data_id_fk": {
+ "name": "opkssh_tokens_host_id_ssh_data_id_fk",
+ "tableFrom": "opkssh_tokens",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "plugin_install_counts": {
+ "name": "plugin_install_counts",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "registry_id": {
+ "name": "registry_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "count": {
+ "name": "count",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 0
+ },
+ "source": {
+ "name": "source",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'aggregate-telemetry'"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_plugin_install_counts_plugin_registry": {
+ "name": "idx_plugin_install_counts_plugin_registry",
+ "columns": [
+ "plugin_id",
+ "registry_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {},
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "plugin_migrations": {
+ "name": "plugin_migrations",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "migration_id": {
+ "name": "migration_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "checksum": {
+ "name": "checksum",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "applied_at": {
+ "name": "applied_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_plugin_migrations_plugin_migration": {
+ "name": "idx_plugin_migrations_plugin_migration",
+ "columns": [
+ "plugin_id",
+ "migration_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "plugin_migrations_plugin_id_plugins_id_fk": {
+ "name": "plugin_migrations_plugin_id_plugins_id_fk",
+ "tableFrom": "plugin_migrations",
+ "tableTo": "plugins",
+ "columnsFrom": [
+ "plugin_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "plugin_permission_grants": {
+ "name": "plugin_permission_grants",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "capability": {
+ "name": "capability",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "granted_at": {
+ "name": "granted_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "granted_by": {
+ "name": "granted_by",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "source": {
+ "name": "source",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'admin'"
+ }
+ },
+ "indexes": {
+ "idx_plugin_permission_grants_plugin_capability": {
+ "name": "idx_plugin_permission_grants_plugin_capability",
+ "columns": [
+ "plugin_id",
+ "capability"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "plugin_permission_grants_plugin_id_plugins_id_fk": {
+ "name": "plugin_permission_grants_plugin_id_plugins_id_fk",
+ "tableFrom": "plugin_permission_grants",
+ "tableTo": "plugins",
+ "columnsFrom": [
+ "plugin_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "plugin_permission_grants_granted_by_users_id_fk": {
+ "name": "plugin_permission_grants_granted_by_users_id_fk",
+ "tableFrom": "plugin_permission_grants",
+ "tableTo": "users",
+ "columnsFrom": [
+ "granted_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "plugin_registries": {
+ "name": "plugin_registries",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "text",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "url": {
+ "name": "url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "kind": {
+ "name": "kind",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'community'"
+ },
+ "enabled": {
+ "name": "enabled",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "signing_key": {
+ "name": "signing_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "last_checked_at": {
+ "name": "last_checked_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "last_index_hash": {
+ "name": "last_index_hash",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {},
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "plugin_settings": {
+ "name": "plugin_settings",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "scope": {
+ "name": "scope",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "scope_id": {
+ "name": "scope_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "key": {
+ "name": "key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "value": {
+ "name": "value",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "encrypted": {
+ "name": "encrypted",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_plugin_settings_scope_key": {
+ "name": "idx_plugin_settings_scope_key",
+ "columns": [
+ "plugin_id",
+ "scope",
+ "scope_id",
+ "key"
+ ],
+ "isUnique": true
+ },
+ "idx_plugin_settings_plugin_scope": {
+ "name": "idx_plugin_settings_plugin_scope",
+ "columns": [
+ "plugin_id",
+ "scope"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "plugin_settings_plugin_id_plugins_id_fk": {
+ "name": "plugin_settings_plugin_id_plugins_id_fk",
+ "tableFrom": "plugin_settings",
+ "tableTo": "plugins",
+ "columnsFrom": [
+ "plugin_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "plugin_storage": {
+ "name": "plugin_storage",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "key": {
+ "name": "key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "value": {
+ "name": "value",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_plugin_storage_plugin_key": {
+ "name": "idx_plugin_storage_plugin_key",
+ "columns": [
+ "plugin_id",
+ "key"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "plugin_storage_plugin_id_plugins_id_fk": {
+ "name": "plugin_storage_plugin_id_plugins_id_fk",
+ "tableFrom": "plugin_storage",
+ "tableTo": "plugins",
+ "columnsFrom": [
+ "plugin_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "plugins": {
+ "name": "plugins",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "text",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "version": {
+ "name": "version",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "tier": {
+ "name": "tier",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'available'"
+ },
+ "source": {
+ "name": "source",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'community'"
+ },
+ "registry_id": {
+ "name": "registry_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "state": {
+ "name": "state",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'disabled'"
+ },
+ "last_error": {
+ "name": "last_error",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "installed_at": {
+ "name": "installed_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "auto_update": {
+ "name": "auto_update",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "manifest_json": {
+ "name": "manifest_json",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ }
+ },
+ "indexes": {
+ "idx_plugins_registry_id": {
+ "name": "idx_plugins_registry_id",
+ "columns": [
+ "registry_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {},
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "proxmox_node_history": {
+ "name": "proxmox_node_history",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "ts": {
+ "name": "ts",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "cpu_percent": {
+ "name": "cpu_percent",
+ "type": "real",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "mem_percent": {
+ "name": "mem_percent",
+ "type": "real",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "disk_percent": {
+ "name": "disk_percent",
+ "type": "real",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "net_rx_bytes": {
+ "name": "net_rx_bytes",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "net_tx_bytes": {
+ "name": "net_tx_bytes",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "proxmox_node_history_host_id_ssh_data_id_fk": {
+ "name": "proxmox_node_history_host_id_ssh_data_id_fk",
+ "tableFrom": "proxmox_node_history",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "proxmox_stats_preferences": {
+ "name": "proxmox_stats_preferences",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "layout": {
+ "name": "layout",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_proxmox_stats_prefs_user_host": {
+ "name": "idx_proxmox_stats_prefs_user_host",
+ "columns": [
+ "user_id",
+ "host_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "proxmox_stats_preferences_user_id_users_id_fk": {
+ "name": "proxmox_stats_preferences_user_id_users_id_fk",
+ "tableFrom": "proxmox_stats_preferences",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "proxmox_stats_preferences_host_id_ssh_data_id_fk": {
+ "name": "proxmox_stats_preferences_host_id_ssh_data_id_fk",
+ "tableFrom": "proxmox_stats_preferences",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "rbac_applied_defaults": {
+ "name": "rbac_applied_defaults",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "role_name": {
+ "name": "role_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "permission": {
+ "name": "permission",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "applied_at": {
+ "name": "applied_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_rbac_applied_defaults_role_permission": {
+ "name": "idx_rbac_applied_defaults_role_permission",
+ "columns": [
+ "role_name",
+ "permission"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {},
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "rbac_known_permissions": {
+ "name": "rbac_known_permissions",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "permission": {
+ "name": "permission",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "first_seen_at": {
+ "name": "first_seen_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_rbac_known_permissions_permission": {
+ "name": "idx_rbac_known_permissions_permission",
+ "columns": [
+ "permission"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {},
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "recent_activity": {
+ "name": "recent_activity",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "type": {
+ "name": "type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_name": {
+ "name": "host_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "timestamp": {
+ "name": "timestamp",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_recent_activity_user_ts": {
+ "name": "idx_recent_activity_user_ts",
+ "columns": [
+ "user_id",
+ "timestamp"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "recent_activity_user_id_users_id_fk": {
+ "name": "recent_activity_user_id_users_id_fk",
+ "tableFrom": "recent_activity",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "recent_activity_host_id_ssh_data_id_fk": {
+ "name": "recent_activity_host_id_ssh_data_id_fk",
+ "tableFrom": "recent_activity",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "roles": {
+ "name": "roles",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "display_name": {
+ "name": "display_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "is_system": {
+ "name": "is_system",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "permissions": {
+ "name": "permissions",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "roles_name_unique": {
+ "name": "roles_name_unique",
+ "columns": [
+ "name"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {},
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "secret_sources": {
+ "name": "secret_sources",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "text",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "kind": {
+ "name": "kind",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'onepassword-connect'"
+ },
+ "base_url": {
+ "name": "base_url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "token": {
+ "name": "token",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "shared": {
+ "name": "shared",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_secret_sources_user": {
+ "name": "idx_secret_sources_user",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "secret_sources_user_id_users_id_fk": {
+ "name": "secret_sources_user_id_users_id_fk",
+ "tableFrom": "secret_sources",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "session_recordings": {
+ "name": "session_recordings",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "username": {
+ "name": "username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "access_id": {
+ "name": "access_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "started_at": {
+ "name": "started_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "ended_at": {
+ "name": "ended_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "duration": {
+ "name": "duration",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "commands": {
+ "name": "commands",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "dangerous_actions": {
+ "name": "dangerous_actions",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "recording_path": {
+ "name": "recording_path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "protocol": {
+ "name": "protocol",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'ssh'"
+ },
+ "format": {
+ "name": "format",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'text'"
+ },
+ "terminated_by_owner": {
+ "name": "terminated_by_owner",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false,
+ "default": false
+ },
+ "termination_reason": {
+ "name": "termination_reason",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {
+ "idx_session_recordings_user_started": {
+ "name": "idx_session_recordings_user_started",
+ "columns": [
+ "user_id",
+ "started_at"
+ ],
+ "isUnique": false
+ },
+ "idx_session_recordings_host": {
+ "name": "idx_session_recordings_host",
+ "columns": [
+ "host_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "session_recordings_host_id_ssh_data_id_fk": {
+ "name": "session_recordings_host_id_ssh_data_id_fk",
+ "tableFrom": "session_recordings",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "session_recordings_user_id_users_id_fk": {
+ "name": "session_recordings_user_id_users_id_fk",
+ "tableFrom": "session_recordings",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ },
+ "session_recordings_access_id_host_access_id_fk": {
+ "name": "session_recordings_access_id_host_access_id_fk",
+ "tableFrom": "session_recordings",
+ "tableTo": "host_access",
+ "columnsFrom": [
+ "access_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "session_share_participants": {
+ "name": "session_share_participants",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "share_id": {
+ "name": "share_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "guest_label": {
+ "name": "guest_label",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "joined_at": {
+ "name": "joined_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "left_at": {
+ "name": "left_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "session_share_participants_share_id_session_shares_id_fk": {
+ "name": "session_share_participants_share_id_session_shares_id_fk",
+ "tableFrom": "session_share_participants",
+ "tableTo": "session_shares",
+ "columnsFrom": [
+ "share_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "session_share_participants_user_id_users_id_fk": {
+ "name": "session_share_participants_user_id_users_id_fk",
+ "tableFrom": "session_share_participants",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "session_shares": {
+ "name": "session_shares",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "text",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "owner_user_id": {
+ "name": "owner_user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "protocol": {
+ "name": "protocol",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "session_id": {
+ "name": "session_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "tab_instance_id": {
+ "name": "tab_instance_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "share_type": {
+ "name": "share_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "target_user_id": {
+ "name": "target_user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "link_token": {
+ "name": "link_token",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "permission_level": {
+ "name": "permission_level",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'read-only'"
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "revoked_at": {
+ "name": "revoked_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "last_joined_at": {
+ "name": "last_joined_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "join_count": {
+ "name": "join_count",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 0
+ }
+ },
+ "indexes": {
+ "session_shares_link_token_unique": {
+ "name": "session_shares_link_token_unique",
+ "columns": [
+ "link_token"
+ ],
+ "isUnique": true
+ },
+ "idx_session_shares_session_id": {
+ "name": "idx_session_shares_session_id",
+ "columns": [
+ "session_id"
+ ],
+ "isUnique": false
+ },
+ "idx_session_shares_host_id": {
+ "name": "idx_session_shares_host_id",
+ "columns": [
+ "host_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "session_shares_host_id_ssh_data_id_fk": {
+ "name": "session_shares_host_id_ssh_data_id_fk",
+ "tableFrom": "session_shares",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "session_shares_owner_user_id_users_id_fk": {
+ "name": "session_shares_owner_user_id_users_id_fk",
+ "tableFrom": "session_shares",
+ "tableTo": "users",
+ "columnsFrom": [
+ "owner_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "session_shares_target_user_id_users_id_fk": {
+ "name": "session_shares_target_user_id_users_id_fk",
+ "tableFrom": "session_shares",
+ "tableTo": "users",
+ "columnsFrom": [
+ "target_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "sessions": {
+ "name": "sessions",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "text",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "jwt_token": {
+ "name": "jwt_token",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "device_type": {
+ "name": "device_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "device_info": {
+ "name": "device_info",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "oidc_sub": {
+ "name": "oidc_sub",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "oidc_sid": {
+ "name": "oidc_sid",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "sso_provider_id": {
+ "name": "sso_provider_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "last_active_at": {
+ "name": "last_active_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_sessions_user_id": {
+ "name": "idx_sessions_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ },
+ "idx_sessions_expires_at": {
+ "name": "idx_sessions_expires_at",
+ "columns": [
+ "expires_at"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "sessions_user_id_users_id_fk": {
+ "name": "sessions_user_id_users_id_fk",
+ "tableFrom": "sessions",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "settings": {
+ "name": "settings",
+ "columns": {
+ "key": {
+ "name": "key",
+ "type": "text",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "value": {
+ "name": "value",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {},
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "shared_credential_secrets": {
+ "name": "shared_credential_secrets",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "credential_access_id": {
+ "name": "credential_access_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "target_user_id": {
+ "name": "target_user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "encrypted_username": {
+ "name": "encrypted_username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "auth_type": {
+ "name": "auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'password'"
+ },
+ "encrypted_password": {
+ "name": "encrypted_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "encrypted_key": {
+ "name": "encrypted_key",
+ "type": "text(16384)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "encrypted_key_password": {
+ "name": "encrypted_key_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "key_type": {
+ "name": "key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "public_key": {
+ "name": "public_key",
+ "type": "text(4096)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "cert_public_key": {
+ "name": "cert_public_key",
+ "type": "text(8192)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_shared_credential_secrets_scope": {
+ "name": "idx_shared_credential_secrets_scope",
+ "columns": [
+ "credential_access_id",
+ "target_user_id"
+ ],
+ "isUnique": true
+ },
+ "idx_shared_credential_secrets_target": {
+ "name": "idx_shared_credential_secrets_target",
+ "columns": [
+ "target_user_id",
+ "credential_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "shared_credential_secrets_target_user_id_users_id_fk": {
+ "name": "shared_credential_secrets_target_user_id_users_id_fk",
+ "tableFrom": "shared_credential_secrets",
+ "tableTo": "users",
+ "columnsFrom": [
+ "target_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "shared_credential_secrets_credential_id_ssh_credentials_id_fk": {
+ "name": "shared_credential_secrets_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "shared_credential_secrets",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "shared_cred_secrets_access_id_fk": {
+ "name": "shared_cred_secrets_access_id_fk",
+ "tableFrom": "shared_credential_secrets",
+ "tableTo": "credential_access",
+ "columnsFrom": [
+ "credential_access_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "shared_host_auth_overrides": {
+ "name": "shared_host_auth_overrides",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "protocol": {
+ "name": "protocol",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'ssh'"
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "shared_host_auth_overrides_host_user_protocol_unique": {
+ "name": "shared_host_auth_overrides_host_user_protocol_unique",
+ "columns": [
+ "host_id",
+ "user_id",
+ "protocol"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "shared_host_auth_overrides_host_id_ssh_data_id_fk": {
+ "name": "shared_host_auth_overrides_host_id_ssh_data_id_fk",
+ "tableFrom": "shared_host_auth_overrides",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "shared_host_auth_overrides_user_id_users_id_fk": {
+ "name": "shared_host_auth_overrides_user_id_users_id_fk",
+ "tableFrom": "shared_host_auth_overrides",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk": {
+ "name": "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "shared_host_auth_overrides",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "shared_host_secrets": {
+ "name": "shared_host_secrets",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "host_access_id": {
+ "name": "host_access_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "target_user_id": {
+ "name": "target_user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "protocol": {
+ "name": "protocol",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'ssh'"
+ },
+ "source_type": {
+ "name": "source_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'credential'"
+ },
+ "original_credential_id": {
+ "name": "original_credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "encrypted_username": {
+ "name": "encrypted_username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "encrypted_auth_type": {
+ "name": "encrypted_auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "encrypted_password": {
+ "name": "encrypted_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "encrypted_key": {
+ "name": "encrypted_key",
+ "type": "text(16384)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "encrypted_key_password": {
+ "name": "encrypted_key_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "encrypted_key_type": {
+ "name": "encrypted_key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "encrypted_domain": {
+ "name": "encrypted_domain",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_shared_host_secrets_scope": {
+ "name": "idx_shared_host_secrets_scope",
+ "columns": [
+ "host_access_id",
+ "target_user_id",
+ "protocol"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "shared_host_secrets_host_access_id_host_access_id_fk": {
+ "name": "shared_host_secrets_host_access_id_host_access_id_fk",
+ "tableFrom": "shared_host_secrets",
+ "tableTo": "host_access",
+ "columnsFrom": [
+ "host_access_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "shared_host_secrets_target_user_id_users_id_fk": {
+ "name": "shared_host_secrets_target_user_id_users_id_fk",
+ "tableFrom": "shared_host_secrets",
+ "tableTo": "users",
+ "columnsFrom": [
+ "target_user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "shared_host_secrets_original_credential_id_ssh_credentials_id_fk": {
+ "name": "shared_host_secrets_original_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "shared_host_secrets",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "original_credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "snippet_access": {
+ "name": "snippet_access",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "snippet_id": {
+ "name": "snippet_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "role_id": {
+ "name": "role_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "granted_by": {
+ "name": "granted_by",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "permission_level": {
+ "name": "permission_level",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'view'"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_snippet_access_user_id": {
+ "name": "idx_snippet_access_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ },
+ "idx_snippet_access_snippet_id": {
+ "name": "idx_snippet_access_snippet_id",
+ "columns": [
+ "snippet_id"
+ ],
+ "isUnique": false
+ },
+ "idx_snippet_access_role_id": {
+ "name": "idx_snippet_access_role_id",
+ "columns": [
+ "role_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "snippet_access_snippet_id_snippets_id_fk": {
+ "name": "snippet_access_snippet_id_snippets_id_fk",
+ "tableFrom": "snippet_access",
+ "tableTo": "snippets",
+ "columnsFrom": [
+ "snippet_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "snippet_access_user_id_users_id_fk": {
+ "name": "snippet_access_user_id_users_id_fk",
+ "tableFrom": "snippet_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "snippet_access_role_id_roles_id_fk": {
+ "name": "snippet_access_role_id_roles_id_fk",
+ "tableFrom": "snippet_access",
+ "tableTo": "roles",
+ "columnsFrom": [
+ "role_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "snippet_access_granted_by_users_id_fk": {
+ "name": "snippet_access_granted_by_users_id_fk",
+ "tableFrom": "snippet_access",
+ "tableTo": "users",
+ "columnsFrom": [
+ "granted_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "snippet_folders": {
+ "name": "snippet_folders",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "color": {
+ "name": "color",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "icon": {
+ "name": "icon",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "snippet_folders_sync_id_unique": {
+ "name": "snippet_folders_sync_id_unique",
+ "columns": [
+ "sync_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "snippet_folders_user_id_users_id_fk": {
+ "name": "snippet_folders_user_id_users_id_fk",
+ "tableFrom": "snippet_folders",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "snippets": {
+ "name": "snippets",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "content": {
+ "name": "content",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "folder": {
+ "name": "folder",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "order": {
+ "name": "order",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 0
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "host_filter": {
+ "name": "host_filter",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "is_note": {
+ "name": "is_note",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ }
+ },
+ "indexes": {
+ "snippets_sync_id_unique": {
+ "name": "snippets_sync_id_unique",
+ "columns": [
+ "sync_id"
+ ],
+ "isUnique": true
+ },
+ "idx_snippets_user_id": {
+ "name": "idx_snippets_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "snippets_user_id_users_id_fk": {
+ "name": "snippets_user_id_users_id_fk",
+ "tableFrom": "snippets",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "ssh_credential_usage": {
+ "name": "ssh_credential_usage",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "used_at": {
+ "name": "used_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_ssh_credential_usage_credential": {
+ "name": "idx_ssh_credential_usage_credential",
+ "columns": [
+ "credential_id"
+ ],
+ "isUnique": false
+ },
+ "idx_ssh_credential_usage_user": {
+ "name": "idx_ssh_credential_usage_user",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "ssh_credential_usage_credential_id_ssh_credentials_id_fk": {
+ "name": "ssh_credential_usage_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "ssh_credential_usage",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "ssh_credential_usage_host_id_ssh_data_id_fk": {
+ "name": "ssh_credential_usage_host_id_ssh_data_id_fk",
+ "tableFrom": "ssh_credential_usage",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "ssh_credential_usage_user_id_users_id_fk": {
+ "name": "ssh_credential_usage_user_id_users_id_fk",
+ "tableFrom": "ssh_credential_usage",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "ssh_credentials": {
+ "name": "ssh_credentials",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "folder": {
+ "name": "folder",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "tags": {
+ "name": "tags",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "pin": {
+ "name": "pin",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "sort_order": {
+ "name": "sort_order",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "auth_type": {
+ "name": "auth_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "username": {
+ "name": "username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "password": {
+ "name": "password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "key": {
+ "name": "key",
+ "type": "text(16384)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "private_key": {
+ "name": "private_key",
+ "type": "text(16384)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "public_key": {
+ "name": "public_key",
+ "type": "text(4096)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "key_password": {
+ "name": "key_password",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "key_type": {
+ "name": "key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "detected_key_type": {
+ "name": "detected_key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "cert_public_key": {
+ "name": "cert_public_key",
+ "type": "text(8192)",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "usage_count": {
+ "name": "usage_count",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 0
+ },
+ "last_used": {
+ "name": "last_used",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "ssh_credentials_sync_id_unique": {
+ "name": "ssh_credentials_sync_id_unique",
+ "columns": [
+ "sync_id"
+ ],
+ "isUnique": true
+ },
+ "idx_ssh_credentials_user_id": {
+ "name": "idx_ssh_credentials_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "ssh_credentials_user_id_users_id_fk": {
+ "name": "ssh_credentials_user_id_users_id_fk",
+ "tableFrom": "ssh_credentials",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "ssh_folders": {
+ "name": "ssh_folders",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "color": {
+ "name": "color",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "icon": {
+ "name": "icon",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "sort_order": {
+ "name": "sort_order",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "ssh_folders_sync_id_unique": {
+ "name": "ssh_folders_sync_id_unique",
+ "columns": [
+ "sync_id"
+ ],
+ "isUnique": true
+ },
+ "idx_ssh_folders_user_id": {
+ "name": "idx_ssh_folders_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "ssh_folders_user_id_users_id_fk": {
+ "name": "ssh_folders_user_id_users_id_fk",
+ "tableFrom": "ssh_folders",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "ssh_folders_credential_id_ssh_credentials_id_fk": {
+ "name": "ssh_folders_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "ssh_folders",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "sso_providers": {
+ "name": "sso_providers",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "type": {
+ "name": "type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "enabled": {
+ "name": "enabled",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "display_order": {
+ "name": "display_order",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 0
+ },
+ "config": {
+ "name": "config",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {},
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "sync_tombstones": {
+ "name": "sync_tombstones",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "entity_type": {
+ "name": "entity_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "deleted_at": {
+ "name": "deleted_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "sync_tombstones_user_id_users_id_fk": {
+ "name": "sync_tombstones_user_id_users_id_fk",
+ "tableFrom": "sync_tombstones",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "termix_identities": {
+ "name": "termix_identities",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "handle": {
+ "name": "handle",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "termix_identities_user_id_unique": {
+ "name": "termix_identities_user_id_unique",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": true
+ },
+ "termix_identities_handle_unique": {
+ "name": "termix_identities_handle_unique",
+ "columns": [
+ "handle"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "termix_identities_user_id_users_id_fk": {
+ "name": "termix_identities_user_id_users_id_fk",
+ "tableFrom": "termix_identities",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "termix_identity_ca": {
+ "name": "termix_identity_ca",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "identity_id": {
+ "name": "identity_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "public_key": {
+ "name": "public_key",
+ "type": "text(4096)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "private_key": {
+ "name": "private_key",
+ "type": "text(8192)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "validity_days": {
+ "name": "validity_days",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 90
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "termix_identity_ca_identity_id_unique": {
+ "name": "termix_identity_ca_identity_id_unique",
+ "columns": [
+ "identity_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "termix_identity_ca_identity_id_termix_identities_id_fk": {
+ "name": "termix_identity_ca_identity_id_termix_identities_id_fk",
+ "tableFrom": "termix_identity_ca",
+ "tableTo": "termix_identities",
+ "columnsFrom": [
+ "identity_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "termix_identity_ca_user_id_users_id_fk": {
+ "name": "termix_identity_ca_user_id_users_id_fk",
+ "tableFrom": "termix_identity_ca",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "termix_identity_keys": {
+ "name": "termix_identity_keys",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "identity_id": {
+ "name": "identity_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "public_key": {
+ "name": "public_key",
+ "type": "text(8192)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "key_type": {
+ "name": "key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "algorithm": {
+ "name": "algorithm",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "label": {
+ "name": "label",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "comment": {
+ "name": "comment",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "source": {
+ "name": "source",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'manual'"
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "enabled": {
+ "name": "enabled",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": true
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "termix_identity_keys_identity_id_termix_identities_id_fk": {
+ "name": "termix_identity_keys_identity_id_termix_identities_id_fk",
+ "tableFrom": "termix_identity_keys",
+ "tableTo": "termix_identities",
+ "columnsFrom": [
+ "identity_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "termix_identity_keys_user_id_users_id_fk": {
+ "name": "termix_identity_keys_user_id_users_id_fk",
+ "tableFrom": "termix_identity_keys",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "termix_identity_keys_credential_id_ssh_credentials_id_fk": {
+ "name": "termix_identity_keys_credential_id_ssh_credentials_id_fk",
+ "tableFrom": "termix_identity_keys",
+ "tableTo": "ssh_credentials",
+ "columnsFrom": [
+ "credential_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "tmux_session_tags": {
+ "name": "tmux_session_tags",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "session_name": {
+ "name": "session_name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "tag": {
+ "name": "tag",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "tmux_session_tags_user_id_users_id_fk": {
+ "name": "tmux_session_tags_user_id_users_id_fk",
+ "tableFrom": "tmux_session_tags",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "tmux_session_tags_host_id_ssh_data_id_fk": {
+ "name": "tmux_session_tags_host_id_ssh_data_id_fk",
+ "tableFrom": "tmux_session_tags",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "transfer_recent": {
+ "name": "transfer_recent",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "source_host_id": {
+ "name": "source_host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "dest_host_id": {
+ "name": "dest_host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "dest_path": {
+ "name": "dest_path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "dest_path_label": {
+ "name": "dest_path_label",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "last_used": {
+ "name": "last_used",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_transfer_recent_user": {
+ "name": "idx_transfer_recent_user",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "transfer_recent_user_id_users_id_fk": {
+ "name": "transfer_recent_user_id_users_id_fk",
+ "tableFrom": "transfer_recent",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "transfer_recent_source_host_id_ssh_data_id_fk": {
+ "name": "transfer_recent_source_host_id_ssh_data_id_fk",
+ "tableFrom": "transfer_recent",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "source_host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "transfer_recent_dest_host_id_ssh_data_id_fk": {
+ "name": "transfer_recent_dest_host_id_ssh_data_id_fk",
+ "tableFrom": "transfer_recent",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "dest_host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "trusted_devices": {
+ "name": "trusted_devices",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "text",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "device_fingerprint": {
+ "name": "device_fingerprint",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "device_type": {
+ "name": "device_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "device_info": {
+ "name": "device_info",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "last_used_at": {
+ "name": "last_used_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_trusted_devices_user_id": {
+ "name": "idx_trusted_devices_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "trusted_devices_user_id_users_id_fk": {
+ "name": "trusted_devices_user_id_users_id_fk",
+ "tableFrom": "trusted_devices",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "ui_preferences": {
+ "name": "ui_preferences",
+ "columns": {
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "data": {
+ "name": "data",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "ui_preferences_user_id_users_id_fk": {
+ "name": "ui_preferences_user_id_users_id_fk",
+ "tableFrom": "ui_preferences",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "user_external_identities": {
+ "name": "user_external_identities",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "provider_id": {
+ "name": "provider_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "subject": {
+ "name": "subject",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "email": {
+ "name": "email",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_user_external_identities_provider_subject": {
+ "name": "idx_user_external_identities_provider_subject",
+ "columns": [
+ "provider_id",
+ "subject"
+ ],
+ "isUnique": true
+ },
+ "idx_user_external_identities_user": {
+ "name": "idx_user_external_identities_user",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "user_external_identities_user_id_users_id_fk": {
+ "name": "user_external_identities_user_id_users_id_fk",
+ "tableFrom": "user_external_identities",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "user_open_tabs": {
+ "name": "user_open_tabs",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "text",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "tab_type": {
+ "name": "tab_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "host_id": {
+ "name": "host_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "label": {
+ "name": "label",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "tab_order": {
+ "name": "tab_order",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 0
+ },
+ "backend_session_id": {
+ "name": "backend_session_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_user_open_tabs_user_id": {
+ "name": "idx_user_open_tabs_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "user_open_tabs_user_id_users_id_fk": {
+ "name": "user_open_tabs_user_id_users_id_fk",
+ "tableFrom": "user_open_tabs",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "user_open_tabs_host_id_ssh_data_id_fk": {
+ "name": "user_open_tabs_host_id_ssh_data_id_fk",
+ "tableFrom": "user_open_tabs",
+ "tableTo": "ssh_data",
+ "columnsFrom": [
+ "host_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "user_preferences": {
+ "name": "user_preferences",
+ "columns": {
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "reopen_tabs_on_login": {
+ "name": "reopen_tabs_on_login",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "theme": {
+ "name": "theme",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "font_size": {
+ "name": "font_size",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "accent_color": {
+ "name": "accent_color",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "language": {
+ "name": "language",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "storage_mode": {
+ "name": "storage_mode",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "command_autocomplete": {
+ "name": "command_autocomplete",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "command_palette_enabled": {
+ "name": "command_palette_enabled",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "show_host_tags": {
+ "name": "show_host_tags",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "host_tray_on_click": {
+ "name": "host_tray_on_click",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "pin_app_rail": {
+ "name": "pin_app_rail",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "expand_app_rail_on_hover": {
+ "name": "expand_app_rail_on_hover",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "show_pin_app_rail_button": {
+ "name": "show_pin_app_rail_button",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "folders_collapsed": {
+ "name": "folders_collapsed",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "confirm_snippet_execution": {
+ "name": "confirm_snippet_execution",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "disable_update_check": {
+ "name": "disable_update_check",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "confirm_tab_close": {
+ "name": "confirm_tab_close",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "hidden_rail_tabs": {
+ "name": "hidden_rail_tabs",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "ai_assistant_enabled": {
+ "name": "ai_assistant_enabled",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "ai_read_only_commands": {
+ "name": "ai_read_only_commands",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "compact_host_view": {
+ "name": "compact_host_view",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "status_color_scheme": {
+ "name": "status_color_scheme",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "custom_themes": {
+ "name": "custom_themes",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "custom_keybindings": {
+ "name": "custom_keybindings",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "terminal_defaults": {
+ "name": "terminal_defaults",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "rdp_defaults": {
+ "name": "rdp_defaults",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "terminal_macros": {
+ "name": "terminal_macros",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "user_preferences_user_id_users_id_fk": {
+ "name": "user_preferences_user_id_users_id_fk",
+ "tableFrom": "user_preferences",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "user_roles": {
+ "name": "user_roles",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "role_id": {
+ "name": "role_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "granted_by": {
+ "name": "granted_by",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "granted_at": {
+ "name": "granted_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_user_roles_user_role": {
+ "name": "idx_user_roles_user_role",
+ "columns": [
+ "user_id",
+ "role_id"
+ ],
+ "isUnique": true
+ },
+ "idx_user_roles_role_id": {
+ "name": "idx_user_roles_role_id",
+ "columns": [
+ "role_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "user_roles_user_id_users_id_fk": {
+ "name": "user_roles_user_id_users_id_fk",
+ "tableFrom": "user_roles",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "user_roles_role_id_roles_id_fk": {
+ "name": "user_roles_role_id_roles_id_fk",
+ "tableFrom": "user_roles",
+ "tableTo": "roles",
+ "columnsFrom": [
+ "role_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "user_roles_granted_by_users_id_fk": {
+ "name": "user_roles_granted_by_users_id_fk",
+ "tableFrom": "user_roles",
+ "tableTo": "users",
+ "columnsFrom": [
+ "granted_by"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "set null",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "user_second_factors": {
+ "name": "user_second_factors",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "plugin_id": {
+ "name": "plugin_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "factor_id": {
+ "name": "factor_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "enrolled_at": {
+ "name": "enrolled_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "idx_user_second_factors_user_factor": {
+ "name": "idx_user_second_factors_user_factor",
+ "columns": [
+ "user_id",
+ "plugin_id",
+ "factor_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "user_second_factors_user_id_users_id_fk": {
+ "name": "user_second_factors_user_id_users_id_fk",
+ "tableFrom": "user_second_factors",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "user_workspaces": {
+ "name": "user_workspaces",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "color": {
+ "name": "color",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "icon": {
+ "name": "icon",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "kind": {
+ "name": "kind",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'manual'"
+ },
+ "is_default": {
+ "name": "is_default",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "payload": {
+ "name": "payload",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'{}'"
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "last_used_at": {
+ "name": "last_used_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {
+ "user_workspaces_sync_id_unique": {
+ "name": "user_workspaces_sync_id_unique",
+ "columns": [
+ "sync_id"
+ ],
+ "isUnique": true
+ },
+ "idx_user_workspaces_user_id": {
+ "name": "idx_user_workspaces_user_id",
+ "columns": [
+ "user_id"
+ ],
+ "isUnique": false
+ }
+ },
+ "foreignKeys": {
+ "user_workspaces_user_id_users_id_fk": {
+ "name": "user_workspaces_user_id_users_id_fk",
+ "tableFrom": "user_workspaces",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "users": {
+ "name": "users",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "text",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "username": {
+ "name": "username",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "password_hash": {
+ "name": "password_hash",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "is_admin": {
+ "name": "is_admin",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "is_oidc": {
+ "name": "is_oidc",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "oidc_identifier": {
+ "name": "oidc_identifier",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "sso_provider_id": {
+ "name": "sso_provider_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "client_id": {
+ "name": "client_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "client_secret": {
+ "name": "client_secret",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "issuer_url": {
+ "name": "issuer_url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "authorization_url": {
+ "name": "authorization_url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "token_url": {
+ "name": "token_url",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "identifier_path": {
+ "name": "identifier_path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "name_path": {
+ "name": "name_path",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "scopes": {
+ "name": "scopes",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false,
+ "default": "'openid email profile'"
+ },
+ "totp_secret": {
+ "name": "totp_secret",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "totp_enabled": {
+ "name": "totp_enabled",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "totp_backup_codes": {
+ "name": "totp_backup_codes",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "registered_at": {
+ "name": "registered_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "donation_modal_dismissed": {
+ "name": "donation_modal_dismissed",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {},
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "vault_profiles": {
+ "name": "vault_profiles",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "description": {
+ "name": "description",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "folder": {
+ "name": "folder",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "tags": {
+ "name": "tags",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "vault_addr": {
+ "name": "vault_addr",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "vault_namespace": {
+ "name": "vault_namespace",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "oidc_mount": {
+ "name": "oidc_mount",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "oidc_role": {
+ "name": "oidc_role",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "ssh_mount": {
+ "name": "ssh_mount",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "ssh_role": {
+ "name": "ssh_role",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "valid_principals": {
+ "name": "valid_principals",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "key_type": {
+ "name": "key_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "shared": {
+ "name": "shared",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "sync_id": {
+ "name": "sync_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "updated_at": {
+ "name": "updated_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ }
+ },
+ "indexes": {
+ "vault_profiles_sync_id_unique": {
+ "name": "vault_profiles_sync_id_unique",
+ "columns": [
+ "sync_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "vault_profiles_user_id_users_id_fk": {
+ "name": "vault_profiles_user_id_users_id_fk",
+ "tableFrom": "vault_profiles",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "vault_tokens": {
+ "name": "vault_tokens",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "integer",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": true
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "profile_id": {
+ "name": "profile_id",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "ssh_cert": {
+ "name": "ssh_cert",
+ "type": "text(8192)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "private_key": {
+ "name": "private_key",
+ "type": "text(8192)",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "expires_at": {
+ "name": "expires_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "last_used": {
+ "name": "last_used",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {
+ "idx_vault_tokens_user_profile": {
+ "name": "idx_vault_tokens_user_profile",
+ "columns": [
+ "user_id",
+ "profile_id"
+ ],
+ "isUnique": true
+ }
+ },
+ "foreignKeys": {
+ "vault_tokens_user_id_users_id_fk": {
+ "name": "vault_tokens_user_id_users_id_fk",
+ "tableFrom": "vault_tokens",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ },
+ "vault_tokens_profile_id_vault_profiles_id_fk": {
+ "name": "vault_tokens_profile_id_vault_profiles_id_fk",
+ "tableFrom": "vault_tokens",
+ "tableTo": "vault_profiles",
+ "columnsFrom": [
+ "profile_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ },
+ "webauthn_credentials": {
+ "name": "webauthn_credentials",
+ "columns": {
+ "id": {
+ "name": "id",
+ "type": "text",
+ "primaryKey": true,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "user_id": {
+ "name": "user_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "name": {
+ "name": "name",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "credential_id": {
+ "name": "credential_id",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "public_key": {
+ "name": "public_key",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false
+ },
+ "counter": {
+ "name": "counter",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": 0
+ },
+ "device_type": {
+ "name": "device_type",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "backed_up": {
+ "name": "backed_up",
+ "type": "integer",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": false
+ },
+ "transports": {
+ "name": "transports",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ },
+ "user_verification": {
+ "name": "user_verification",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "'preferred'"
+ },
+ "created_at": {
+ "name": "created_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": true,
+ "autoincrement": false,
+ "default": "CURRENT_TIMESTAMP"
+ },
+ "last_used_at": {
+ "name": "last_used_at",
+ "type": "text",
+ "primaryKey": false,
+ "notNull": false,
+ "autoincrement": false
+ }
+ },
+ "indexes": {},
+ "foreignKeys": {
+ "webauthn_credentials_user_id_users_id_fk": {
+ "name": "webauthn_credentials_user_id_users_id_fk",
+ "tableFrom": "webauthn_credentials",
+ "tableTo": "users",
+ "columnsFrom": [
+ "user_id"
+ ],
+ "columnsTo": [
+ "id"
+ ],
+ "onDelete": "cascade",
+ "onUpdate": "no action"
+ }
+ },
+ "compositePrimaryKeys": {},
+ "uniqueConstraints": {},
+ "checkConstraints": {}
+ }
+ },
+ "views": {},
+ "enums": {},
+ "_meta": {
+ "schemas": {},
+ "tables": {},
+ "columns": {}
+ },
+ "internal": {
+ "indexes": {}
+ }
+}
\ No newline at end of file
diff --git a/drizzle/sqlite/meta/_journal.json b/drizzle/sqlite/meta/_journal.json
index 3d2bb5521..0104fae2e 100644
--- a/drizzle/sqlite/meta/_journal.json
+++ b/drizzle/sqlite/meta/_journal.json
@@ -190,6 +190,13 @@
"when": 1790118360159,
"tag": "0026_fair_sauron",
"breakpoints": true
+ },
+ {
+ "idx": 27,
+ "version": "6",
+ "when": 1790135162496,
+ "tag": "0027_luxuriant_cargill",
+ "breakpoints": true
}
]
}
\ No newline at end of file
diff --git a/electron/main.cjs b/electron/main.cjs
index dcb69b099..4f65748b3 100644
--- a/electron/main.cjs
+++ b/electron/main.cjs
@@ -1674,13 +1674,21 @@ ipcMain.handle(
const success = url.searchParams.get("success");
const error = url.searchParams.get("error");
const token = url.searchParams.get("token");
+ const secondFactor = url.searchParams.get("second_factor") === "1";
res.writeHead(200, { "Content-Type": "text/html" });
res.end(
- `${success === "true" ? "Authentication successful!" : "Authentication failed."}
You can close this tab and return to Termix.
`,
+ `${success === "true" || secondFactor ? "Authentication successful!" : "Authentication failed."}
You can close this tab and return to Termix.
`,
);
- if (success === "true") {
+ if (secondFactor) {
+ finish({
+ success: false,
+ secondFactor: true,
+ tempToken: url.searchParams.get("temp_token"),
+ factors: url.searchParams.get("second_factors"),
+ });
+ } else if (success === "true") {
finish({ success: true, token });
} else {
finish({
diff --git a/packages/plugin-sdk/ARCHITECTURE.md b/packages/plugin-sdk/ARCHITECTURE.md
index 1295bf529..6297f8937 100644
--- a/packages/plugin-sdk/ARCHITECTURE.md
+++ b/packages/plugin-sdk/ARCHITECTURE.md
@@ -309,6 +309,11 @@ Anonymous shared-session and collab pages have no session. They load only
plugins whose manifest sets `contributes.guest: true`, from the public
`GET /plugins/public`, and `app.guest` is true there.
+The login screen runs a smaller pass before anyone signs in: it activates only
+enabled plugins that contribute `loginMethods` or `secondFactors`, listed by
+the public `GET /plugins/public-manifest`. They stay active after login, and
+the full pass does not load the same bundle twice. See Auth below.
+
#### Shared modules and the import map
A bundle keeps `react`, `react-dom`, `react-dom/client`, `react/jsx-runtime`,
@@ -360,14 +365,15 @@ boundary and Suspense.
| `registerAction`, `declareActionSlot` | Frontend actions and the slots a plugin owns |
| `registerSlotContribution`, `invokeAction` | Fill a slot with a `button` or a `component`, with an optional `when`; call an action and get its result |
| `registerSshAuthEditor` | An SSH auth method's editor in the host editor |
-| `registerLoginMethod`, `registerSecondFactorUI` | Typed now, wired by A8 |
+| `registerLoginMethod`, `registerSecondFactorUI` | Login screen UI for a method and a second factor challenge (plus an optional `enrollment` section) |
| `api`, `wsUrl(path)` | axios on `/plugin-api//` and the plugin's WebSocket URL |
| `tabs.open`, `getLayout`, `applyLayout`, `onChange` | Tab control, used by workspaces |
| `guest`, `info`, `onDispose` | Guest mode flag, plugin info, extra cleanup |
Hooks: `useTranslation` (the plugin's namespace), `usePermission` (a short
name resolves to `.`), `useSettings`, `useHost`, `useHosts`,
-`useCurrentUser`, `useTheme`, `useToast`, `usePluginApi`, `useTabs`. The SDK
+`useCurrentUser`, `useTheme`, `useToast`, `usePluginApi`, `useTabs`,
+`useSshAuthTypes` (every SSH auth type the server knows, with its plugin). The SDK
has no runtime dependencies: the hooks delegate to a host bridge core installs.
Slots core owns: `terminal.toolbar`, `terminal.dock`, `terminal.overlay`
@@ -461,7 +467,153 @@ panel, card, host editor section, settings component or slot, and
Core keeps password login, sessions, API keys, trusted proxy login, Electron
auto-session and trusted devices, plus the base SSH auth types password, key,
stored credential, agent and none. Every other login method, second factor and
-SSH auth method is a plugin through `ctx.auth`. **A8.**
+SSH auth method is a plugin through `ctx.auth`.
+
+In 2.9.0, OIDC (and GitHub, Google), LDAP, passkeys, TOTP, OPKSSH, Step-CA,
+Vault, Tailscale and Warpgate still live in core. They register through the
+same interfaces from `src/backend/auth/legacy-providers.ts` and
+`src/ui/auth/legacy-auth-ui.tsx` with `pluginId: "core"`. Phase C moves each
+one into its plugin by moving its block out of those two files; D1 deletes them.
+Nothing else in core branches on those type names.
+
+#### One SSH connect pipeline
+
+Every SSH connection, core's and plugins', goes through
+`src/backend/hosts/connect/`:
+
+1. `resolveHostById` resolves the host for the acting user: RBAC, owner-key
+ decryption, shared-host overrides and shared agent, and `op://` external
+ secret references.
+2. `buildConnectConfig` builds the ssh2 config: the defaults for the
+ connection's purpose (terminal, file-manager, tmux, metrics, fleet, docker,
+ ...), the host key verifier, then the auth provider's `prepare`.
+3. `openSshTransport` does port knocking, the Cloudflare Access tunnel, the
+ jump host chain (every hop through steps 1 and 2) or SOCKS5.
+4. `connectHost` connects with a keyboard-interactive handler: a prompt channel
+ when a person can answer (terminal, file manager, docker), otherwise the
+ stored password for password prompts and nothing else.
+
+Keyboard-interactive rounds are classified once (`classifyKeyboardInteractive`):
+an interceptor first (Warpgate), then push MFA, TOTP, and plain input. The
+transport decides how to ask.
+
+A host whose `authType` has no provider fails with
+`This host uses , which needs the plugin` (the plugin is found
+from `contributes.auth.sshAuthTypes`, including disabled plugins), and the host
+editor shows the same notice.
+
+#### SSH auth providers
+
+```ts
+ctx.auth.registerSshAuthProvider({
+ type: "corp-ca", // stored in ssh_data.auth_type
+ labelKey: "authType",
+ requiresSecret: false, // shared hosts: does a recipient need a secret
+ needsUserInteraction: true, // a browser sign-in or a person at the keyboard
+ supportsBackground: false, // can metrics and fleets poll it unattended
+ credentialType: false, // also offered as a stored credential type
+ interaction: "corp-ca", // what its outcomes call the browser step
+ fields: [/* settings fields */],
+ connectOptions: (host, purpose) => ({/* config overrides */}),
+ prepare: async (config, host, env) => {
+ // fill config (env.client is the ssh2 Client, for certificate patching)
+ return { status: "ready" };
+ // or { status: "interaction-required", interaction: "corp-ca", message }
+ // or { status: "error", code: "missing-secret", message }
+ },
+ onKeyboardInteractive: (round, host) => null, // claim a prompt style
+ onAuthFailed: (host, env, context) => undefined, // clear caches, retry once
+ startInteraction: async (request) => {}, // start the browser step
+});
+```
+
+The type must be listed in `contributes.auth.sshAuthTypes`, and the plugin
+needs `auth:provide`. The grant is checked on every `prepare`. `fields` are the
+plugin's own host settings (declare them in `contributes.settings.host` too):
+the host editor renders them when the plugin registered no editor, and
+`prepare` reads them with `ctx.settings.getHost(host.id, key)`. A frontend can
+instead draw its own editor with `app.registerSshAuthEditor`.
+
+A transport that can show a browser step sends `_auth_required`
+and later calls the provider's `startInteraction` for `_start_auth`.
+
+#### Login methods and second factors
+
+```ts
+ctx.auth.registerLoginMethod({
+ id: "corp-sso",
+ labelKey: "signIn",
+ kind: "redirect",
+ describe: async () => [{ id: "main", label: "Corp", enabled: true }],
+ start: async (request, instanceId) => ({ redirectUrl }),
+ callback: async (request) => ({
+ kind: "external",
+ provider: "corp",
+ subject: "123",
+ email,
+ name,
+ groups,
+ isAdmin,
+ allowedUsers,
+ returnTo,
+ rememberMe,
+ }),
+});
+ctx.auth.registerSecondFactor({
+ id: "pin",
+ labelKey: "pin",
+ isEnrolled: async (userId) => true,
+ challenge: async (userId) => ({/* for the UI */}),
+ verify: async (userId, body) => body.pin === "1234",
+ reset: async (userId) => {},
+});
+await ctx.auth.recordEnrollment(userId, "pin"); // and removeEnrollment
+```
+
+A method never issues a session. It returns an identity: an existing user id,
+or an external identity. Core then:
+
+1. finds the user through `user_external_identities` (provider, subject), or
+ provisions one with the core rules: first user is admin, the allowed-users
+ list is checked on every sign-in, provisioning needs SSO auto-provisioning,
+ admin approval is a hook that is off today, the admin group and role map
+ are kept in step;
+2. unlocks the data key (the password for password logins);
+3. runs second factors: every row in `user_second_factors` plus any factor
+ that reports itself enrolled. **Fail closed:** a row whose plugin is
+ disabled or gone refuses the login ("contact an admin"). A trusted device
+ or a method that already proved a factor (a verified passkey) skips the step;
+4. issues the JWT, cookie, trusted device and the `login` audit line.
+
+Routes, all under `/users/auth`: `GET methods` (public), `GET :methodId/start`,
+`GET|POST :methodId/callback`, `POST :methodId/verify`,
+`POST second-factor/:factorId/challenge`, `POST second-factor/:factorId/verify`.
+A redirect method's provider must send the browser back to
+`/users/auth//callback`. The older routes (`/users/login`,
+`/users/totp/verify-login`, `/users/oidc/*`, `/users/ldap/login`,
+`/users/webauthn/authenticate/verify`) are thin wrappers over the same pipeline.
+
+An admin clears a user's factors, including orphaned ones, with
+`DELETE /users/admin/:userId/second-factors` (audited as
+`admin_reset_second_factors`).
+
+Password login is always a method. The admin "allow password login" setting
+still turns it off, but only while another method (an enabled SSO instance,
+or trusted proxy login) can sign someone in; otherwise it stays on with a
+warning so nobody is locked out.
+
+#### Login UI before sign-in
+
+The login screen loads the frontends of enabled plugins that contribute login
+methods or second factors from the public `GET /plugins/public-manifest`
+(ids, versions, asset info and `contributes.auth` only), before anyone signs
+in. `app.registerLoginMethod` draws a button or form for a method the server
+lists (props: `instances`, `rememberMe`, `submit`, `startRedirect`,
+`complete`); a redirect method with no UI gets one button per instance.
+`app.registerSecondFactorUI` draws the challenge (props: `verify`,
+`challenge`, `cancel`) and, with `enrollment`, a section in Settings >
+Security. At activation before sign-in `app.api` calls fail with 401, so do
+nothing there but register.
### 13. Where plugins live
@@ -594,6 +746,12 @@ not do.
"defaultRoles": ["user"], // system roles only, applied once
},
],
+ "auth": {
+ // each needs "auth:provide" in capabilities
+ "sshAuthTypes": ["corp-ca"], // host auth types this plugin handles
+ "loginMethods": ["corp-sso"],
+ "secondFactors": ["pin"],
+ },
"settings": {
"admin": [
{
@@ -690,6 +848,10 @@ refuses to register a view the manifest does not declare. `contributes.guest`
opts a plugin into anonymous guest pages. Action contributions and slots
accept the kinds `button` and `component`.
+`contributes.auth` lists the ids a plugin registers through `ctx.auth`. A
+register call for an id not listed here throws. Core also reads
+`sshAuthTypes` from disabled plugins, to say which plugin a host needs.
+
`contributes.hostCapability`, `provides`, `requires`, `providesSecret` and
`requiresSecret` are carried forward from v1 unchanged because the service and
secret registries read them at activation. Phase B reshapes them.
@@ -718,7 +880,7 @@ deciding, not the mechanism.
| `ssh:connect` | high | Run commands on hosts it is connected to |
| `process:spawn` | high | Run programs on the Termix server |
| `users:write` | high | Create and change user accounts |
-| `auth:provide` | high | Add a login method or second factor |
+| `auth:provide` | high | Add a login method, second factor or SSH auth type |
| `system:tls` | high | Request and replace the server certificate |
| `hosts:write` | medium | Create and change hosts |
| `credentials:use` | medium | Connect using a host's stored credentials, without seeing them |
@@ -772,12 +934,28 @@ Built per plugin in `src/backend/plugins/ctx.ts` and passed to `activate`.
| `ctx.http.router` / `ctx.ws.route` / `.upgrade` | `network:serve` | **A4** |
| `ctx.rbac.has` / `.hasFor` / `.require` | own permissions only | **A5** |
| `ctx.hosts.*` | `hosts:read` / `hosts:write` | B |
-| `ctx.ssh.*` | `ssh:connect`, `credentials:use` | B |
+| `ctx.ssh.*` | `ssh:connect`, `credentials:use` | **A8** |
| `ctx.settings.*` | `settings:read-core` (readCore only) | **A6** |
| `ctx.notify.*` | `notify:send` | A6 |
-| `ctx.auth.*` | `auth:provide` | A8 |
+| `ctx.auth.*` | `auth:provide` | **A8** |
| `ctx.fetch` | `network:outbound` | B |
+`ctx.ssh` was pulled forward from B so plugin transports go through core's
+connect pipeline instead of importing ssh2 helpers from core:
+
+- `connect(hostOrId, { purpose, pool? })` returns `{ client, dispose }`.
+- `withConnection(host, { pool, purpose }, fn)` borrows a pooled connection.
+- `jumpChain(jumpHosts, { forHost? })` returns a client at the end of a jump
+ chain, for forwarding to something that is not SSH.
+- `prepare(host, { client, purpose })`, `openTransport`,
+ `classifyKeyboardInteractive` and `autoResponses` are the lower level for a
+ transport with its own prompt flow (docker's console, host metrics).
+- `requiresSecret(authType)` and `supportsBackground(authType)` ask the
+ provider.
+
+Each new connection is audited and runs as the current actor; pooled reuse is
+not. Connections and pool entries are closed on deactivate.
+
### The actor
Never comes from plugin code. It is held in `AsyncLocalStorage` and set two
diff --git a/packages/plugin-sdk/schema/manifest.schema.json b/packages/plugin-sdk/schema/manifest.schema.json
index 65ab009e1..12a35588e 100644
--- a/packages/plugin-sdk/schema/manifest.schema.json
+++ b/packages/plugin-sdk/schema/manifest.schema.json
@@ -264,6 +264,24 @@
}
},
"guest": { "type": "boolean" },
+ "auth": {
+ "type": "object",
+ "additionalProperties": false,
+ "properties": {
+ "sshAuthTypes": {
+ "type": "array",
+ "items": { "type": "string", "pattern": "^[a-z][a-z0-9-]{0,63}$" }
+ },
+ "loginMethods": {
+ "type": "array",
+ "items": { "type": "string", "pattern": "^[a-z][a-z0-9-]{0,63}$" }
+ },
+ "secondFactors": {
+ "type": "array",
+ "items": { "type": "string", "pattern": "^[a-z][a-z0-9-]{0,63}$" }
+ }
+ }
+ },
"panels": {
"type": "array",
"items": {
diff --git a/packages/plugin-sdk/src/backend.ts b/packages/plugin-sdk/src/backend.ts
index 2a3c1b391..f67be1e3d 100644
--- a/packages/plugin-sdk/src/backend.ts
+++ b/packages/plugin-sdk/src/backend.ts
@@ -6,11 +6,11 @@
* description of the contract rather than an implementation a plugin could
* reach around.
*
- * Members marked A3-A8 are not built yet. A plugin written against them today
- * will type-check and fail at runtime, which is the intended signal.
+ * ctx.ssh is the part of step B's host surface that A8 needed early, so plugin
+ * transports could leave core's internals behind.
*/
-import type { PluginManifest } from "./manifest.js";
+import type { PluginManifest, PluginSettingsField } from "./manifest.js";
import type { PluginTableDefinition } from "./db.js";
/**
@@ -36,6 +36,23 @@ export class PluginCapabilityError extends Error {
}
}
+/**
+ * Thrown by a login method or second factor to refuse a sign-in with a
+ * message the user can see. `code` is a stable id the login screen can map to
+ * its own text; `status` is the HTTP status for form methods.
+ */
+export class LoginMethodError extends Error {
+ readonly status: number;
+ readonly code?: string;
+
+ constructor(message: string, status = 401, code?: string) {
+ super(message);
+ this.name = "LoginMethodError";
+ this.status = status;
+ this.code = code;
+ }
+}
+
export interface PluginLogger {
debug: (message: string) => void;
info: (message: string) => void;
@@ -349,6 +366,373 @@ export interface PluginSettings {
readCore: (key: string) => Promise;
}
+/**
+ * A host as the SSH pipeline reads it: resolved by core, with secrets filled
+ * in for the acting user. Plugins get one from core and hand it back; they
+ * should not build one from scratch.
+ */
+export interface PluginSshHost {
+ id: number;
+ ip: string;
+ port: number;
+ username: string;
+ userId?: string | null;
+ authType?: string | null;
+ [key: string]: unknown;
+}
+
+/** Picks keepalive and timeout defaults. "plugin" is the generic one. */
+export type PluginSshPurpose =
+ | "plugin"
+ | "docker"
+ | "docker-console"
+ | "metrics"
+ | "proxmox"
+ | "fleet"
+ | "remote-desktop"
+ | "tunnel";
+
+export type PluginSshAuthOutcome =
+ | { status: "ready" }
+ | {
+ status: "interaction-required";
+ /** Transports send "_auth_required", e.g. "opkssh". */
+ interaction: string;
+ message: string;
+ /** Extra boolean HTTP transports put in their 401 body. */
+ flag?: string;
+ }
+ | {
+ status: "error";
+ code:
+ | "missing-secret"
+ | "invalid-key"
+ | "passphrase-required"
+ | "provider-missing"
+ | "failed";
+ message: string;
+ }
+ | {
+ /** Try once more with these config changes. */
+ status: "retry";
+ patch: Record;
+ message: string;
+ };
+
+export interface PluginKeyboardInteractivePrompt {
+ prompt: string;
+ echo?: boolean;
+}
+
+export type PluginKeyboardInteractiveDecision =
+ | { kind: "auto"; responses: string[] }
+ | {
+ kind: "warpgate";
+ url: string | null;
+ securityKey: string;
+ instructions: string;
+ }
+ | { kind: "totp"; promptIndex: number }
+ | { kind: "input"; promptIndex: number; isPush: boolean };
+
+export type PluginSshPromptRequest =
+ | { kind: "totp"; prompt: string; retry: boolean }
+ | { kind: "input"; prompt: string; echo: boolean; isPush: boolean }
+ | {
+ kind: "warpgate";
+ url: string | null;
+ securityKey: string;
+ instructions: string;
+ };
+
+/** Answers keyboard-interactive prompts. Resolve null to give up. */
+export interface PluginSshPromptChannel {
+ ask: (request: PluginSshPromptRequest) => Promise;
+}
+
+export interface PluginSshConnectOptions {
+ purpose?: PluginSshPurpose;
+ /** Overall time to reach "ready". Defaults to 30s. */
+ timeoutMs?: number;
+ /** Without one, the stored password answers password prompts. */
+ prompt?: PluginSshPromptChannel;
+ /** Config fields to force, e.g. a longer readyTimeout. */
+ overrides?: Record;
+}
+
+export interface PluginSshConnection {
+ /** An ssh2 Client, already "ready". */
+ client: Client;
+ jumpClient: Client | null;
+ /** Ends the connection and its jump chain. Also runs on deactivate. */
+ dispose: () => void;
+}
+
+/**
+ * SSH through core's one connect pipeline: host resolution, auth providers,
+ * jump hosts, proxies, host key checks, keepalive and port knocking.
+ *
+ * Every call needs ssh:connect and credentials:use, runs as the acting user
+ * (or the host's owner for background work on a resolved host) and writes an
+ * audit line per new connection. Connections still open on deactivate are
+ * closed.
+ */
+export interface PluginSsh {
+ connect: (
+ host: number | PluginSshHost,
+ options?: PluginSshConnectOptions,
+ ) => Promise>;
+
+ /** Borrows a pooled connection. The pool key is `::`. */
+ withConnection: (
+ host: number | PluginSshHost,
+ options: PluginSshConnectOptions & { pool: string },
+ fn: (client: Client) => Promise,
+ ) => Promise;
+
+ /**
+ * A ready client at the end of a jump host chain, each hop resolved and
+ * authenticated through the pipeline. For forwarding to something that is
+ * not an SSH server (an RDP port behind a bastion).
+ */
+ jumpChain: (
+ jumpHosts: Array<{ hostId: number }>,
+ options?: {
+ /** Background work: resolve the hops as this host's owner. */
+ forHost?: PluginSshHost;
+ },
+ ) => Promise>;
+
+ /** The pool key withConnection would use, for clearing it. */
+ poolKey: (pool: string, host: PluginSshHost) => string;
+
+ /**
+ * Lower level: fills an ssh2 config for a client the plugin drives itself,
+ * for transports with their own prompt flow. Never connects.
+ */
+ prepare: (
+ host: PluginSshHost,
+ options: {
+ purpose?: PluginSshPurpose;
+ client: unknown;
+ /** Server-side host id when it differs from host.id. */
+ serverHostId?: number;
+ log?: (level: "info" | "warning" | "error", message: string) => void;
+ },
+ ) => Promise<{
+ config: Record;
+ outcome: PluginSshAuthOutcome;
+ }>;
+
+ /** Lower level: port knocking, jump hosts or proxy; sets config.sock. */
+ openTransport: (
+ host: PluginSshHost,
+ config: Record,
+ ) => Promise<{ jumpClient: unknown | null; via: string }>;
+
+ /** What a keyboard-interactive round is. Pure; no capability needed. */
+ classifyKeyboardInteractive: (
+ round: {
+ name: string;
+ instructions: string;
+ prompts: PluginKeyboardInteractivePrompt[];
+ },
+ host: PluginSshHost,
+ ) => PluginKeyboardInteractiveDecision;
+
+ /** Stored password for password prompts, empty for the rest. */
+ autoResponses: (
+ prompts: PluginKeyboardInteractivePrompt[],
+ password: string | null | undefined,
+ ) => string[];
+
+ /** Whether an auth type carries a secret (drives "auth_required" flows). */
+ requiresSecret: (authType: string) => boolean;
+
+ /** Whether an auth type can connect unattended, for polling. */
+ supportsBackground: (authType: string) => boolean;
+}
+
+export interface PluginSshAuthEnv {
+ /** The ssh2 Client about to connect; certificate auth patches it. */
+ client: unknown;
+ userId: string;
+ hostId: number;
+ purpose: string;
+ interactive: boolean;
+ log: (level: "info" | "warning" | "error", message: string) => void;
+}
+
+/**
+ * An SSH auth type. Its `type` is what ssh_data.auth_type stores, and it must
+ * be listed in the manifest's contributes.auth.sshAuthTypes.
+ */
+export interface PluginSshAuthProvider {
+ type: string;
+ labelKey: string;
+ descriptionKey?: string;
+ /** Host and credential editor fields, in the settings field schema. */
+ fields?: PluginSettingsField[];
+ /** Also offered as a stored credential type. */
+ credentialType?: boolean;
+ /** Needs a browser sign-in or a person at the keyboard. */
+ needsUserInteraction?: boolean;
+ /** Carries a secret, so a shared host needs one resolved per recipient. */
+ requiresSecret?: boolean;
+ /** Can connect unattended. Defaults to true. */
+ supportsBackground?: boolean;
+ /** Interaction name its outcomes use, for startInteraction routing. */
+ interaction?: string;
+ connectOptions?: (
+ host: PluginSshHost,
+ purpose: string,
+ ) => Record;
+ /** Fills the ssh2 config for this host. Never connects. */
+ prepare: (
+ config: Record,
+ host: PluginSshHost,
+ env: PluginSshAuthEnv,
+ ) => Promise;
+ /** Claims keyboard-interactive rounds for hosts of this type. */
+ onKeyboardInteractive?: (
+ round: {
+ name: string;
+ instructions: string;
+ prompts: PluginKeyboardInteractivePrompt[];
+ },
+ host: PluginSshHost,
+ ) => PluginKeyboardInteractiveDecision | null;
+ /** Synchronous: decide on a retry before the socket closes. */
+ onAuthFailed?: (
+ host: PluginSshHost,
+ env: PluginSshAuthEnv,
+ context: {
+ error: Error;
+ retries: number;
+ canRetry: boolean;
+ methodNotAvailable: boolean;
+ },
+ ) => PluginSshAuthOutcome | undefined;
+ /** Starts the browser step behind an interaction-required outcome. */
+ startInteraction?: (request: {
+ userId: string;
+ hostId: number;
+ host: { name?: string | null; ip: string; username: string };
+ socket: unknown;
+ requestOrigin: string;
+ payload: Record;
+ }) => Promise;
+}
+
+/**
+ * Who a login method says the user is. Core finds or provisions the user,
+ * runs second factors and issues the session; a method never does.
+ */
+export type PluginVerifiedIdentity =
+ | {
+ kind: "user";
+ userId: string;
+ /** The method already proved a second factor (a verified passkey). */
+ mfaSatisfied?: boolean;
+ /** Password logins unlock the user's data key with it. */
+ password?: string;
+ /** Redirect methods: where the browser goes back to. */
+ returnTo?: string;
+ rememberMe?: boolean;
+ }
+ | {
+ kind: "external";
+ /** Stable provider id, e.g. an SSO provider row id. */
+ provider: string;
+ /** The provider's id for the user. At most 255 characters. */
+ subject: string;
+ email?: string | null;
+ name?: string | null;
+ groups?: string[];
+ /** Provider says the user is an admin (admin group, LDAP group). */
+ isAdmin?: boolean;
+ /** Allowed-users list to check before provisioning or signing in. */
+ allowedUsers?: string | null;
+ mfaSatisfied?: boolean;
+ /** Redirect methods: where the browser goes back to. */
+ returnTo?: string;
+ rememberMe?: boolean;
+ };
+
+/** Request shape a login method sees. Structural, like PluginRequestLike. */
+export interface PluginLoginRequest {
+ body: Record;
+ query: Record;
+ headers: Record;
+ ip?: string;
+ [key: string]: unknown;
+}
+
+export interface PluginLoginInstance {
+ /** Passed back to start/verify as instanceId, e.g. an SSO provider id. */
+ id: string;
+ label: string;
+ enabled: boolean;
+}
+
+export interface PluginLoginMethod {
+ id: string;
+ labelKey: string;
+ icon?: string;
+ kind: "redirect" | "form";
+ /** Enabled instances, shown on the login screen. No secrets. */
+ describe?: () => Promise;
+ /** Redirect methods: where to send the browser. */
+ start?: (
+ request: PluginLoginRequest,
+ instanceId: string | null,
+ ) => Promise<{ redirectUrl: string }>;
+ /** Redirect methods: the provider's callback. */
+ callback?: (request: PluginLoginRequest) => Promise;
+ /** Form methods: check what the user typed. */
+ verify?: (
+ request: PluginLoginRequest,
+ instanceId: string | null,
+ ) => Promise;
+}
+
+export interface PluginSecondFactor {
+ id: string;
+ labelKey: string;
+ isEnrolled: (userId: string) => Promise;
+ /** Anything the client needs before the user answers. */
+ challenge?: (userId: string) => Promise;
+ /**
+ * True when the answer is right. Return an object to refuse with a specific
+ * message, for example when the factor had to be reset.
+ */
+ verify: (
+ userId: string,
+ body: Record,
+ ) => Promise;
+ /** Removes the user's enrolment. Called by the admin reset. */
+ reset?: (userId: string) => Promise;
+}
+
+/**
+ * Login methods, second factors and SSH auth types. Every register call needs
+ * auth:provide and a matching contributes.auth entry, and is undone on
+ * deactivate. Core owns sessions: a method returns an identity and core does
+ * the rest.
+ */
+export interface PluginAuth {
+ registerSshAuthProvider: (provider: PluginSshAuthProvider) => void;
+ registerLoginMethod: (method: PluginLoginMethod) => void;
+ registerSecondFactor: (factor: PluginSecondFactor) => void;
+ /**
+ * Marks a user as enrolled in one of this plugin's factors. Core keeps the
+ * row even when the plugin is gone, so it can refuse the login instead of
+ * skipping the factor.
+ */
+ recordEnrollment: (userId: string, factorId: string) => Promise;
+ removeEnrollment: (userId: string, factorId: string) => Promise;
+}
+
export interface PluginContext {
readonly pluginId: string;
readonly manifest: PluginManifest;
@@ -365,6 +749,10 @@ export interface PluginContext {
readonly rbac: PluginRbac;
readonly settings: PluginSettings;
readonly disposables: PluginDisposables;
+ /** SSH through core's connect pipeline. Needs ssh:connect and credentials:use. */
+ readonly ssh: PluginSsh;
+ /** Login methods, second factors and SSH auth types. Needs auth:provide. */
+ readonly auth: PluginAuth;
/**
* Runs `fn` with `userId` as the acting user, for background work that has
diff --git a/packages/plugin-sdk/src/frontend.ts b/packages/plugin-sdk/src/frontend.ts
index 2928b0d72..d2282c324 100644
--- a/packages/plugin-sdk/src/frontend.ts
+++ b/packages/plugin-sdk/src/frontend.ts
@@ -365,18 +365,58 @@ export interface SshAuthEditorContribution {
component?: ComponentType;
}
-/** A7 declares these; A8 wires them into the login screen. */
+/** What the login screen hands a login method's UI. */
+export interface LoginMethodUIProps {
+ methodId: string;
+ /** Enabled instances from the server, e.g. one per SSO provider. */
+ instances: Array<{ id: string; label: string }>;
+ rememberMe: boolean;
+ disabled: boolean;
+ /** What the user typed in the username field, when there is one. */
+ username?: string;
+ /**
+ * Form methods: posts the body to the method's verify endpoint, then the
+ * login screen finishes the login or shows the second-factor step.
+ */
+ submit: (body: Record, instanceId?: string) => Promise;
+ /** Redirect methods: sends the browser (or the system browser) away. */
+ startRedirect: (instanceId?: string) => Promise;
+ /** Hands a login response from a request the UI made itself. */
+ complete: (response: Record) => Promise;
+}
+
+/**
+ * A button or form on the login screen. `id` matches the login method the
+ * backend registered with ctx.auth.registerLoginMethod; the screen shows it
+ * only while the server reports that method as enabled.
+ */
export interface LoginMethodContribution {
id: string;
titleKey: string;
icon?: IconComponent;
- component: ComponentType>;
+ component: ComponentType;
+}
+
+/** What the second-factor step hands a factor's UI. */
+export interface SecondFactorUIProps {
+ factorId: string;
+ rememberMe: boolean;
+ disabled: boolean;
+ /** Sends the user's answer; the login screen finishes or shows the error. */
+ verify: (body: Record) => Promise;
+ /** Whatever the backend factor's challenge() returns. */
+ challenge: () => Promise;
+ cancel: () => void;
}
export interface SecondFactorContribution {
+ /** Matches the id the backend registered with ctx.auth.registerSecondFactor. */
id: string;
titleKey: string;
- component: ComponentType>;
+ /** The challenge shown after the first login step. */
+ component: ComponentType;
+ /** Enrolment, shown in Settings > Security. */
+ enrollment?: ComponentType>;
}
/** The subset of axios a plugin uses, rooted at /plugin-api//. */
@@ -516,6 +556,18 @@ export interface SettingsState {
save: (values: Record) => Promise;
}
+/** An SSH auth type the server can connect with. */
+export interface SshAuthTypeInfo {
+ type: string;
+ /** Core translation key, or the plugin editor's title. */
+ labelKey: string;
+ pluginId: string;
+ /** Also offered as a stored credential type. */
+ credentialType: boolean;
+ /** Can connect unattended, for polling. */
+ supportsBackground: boolean;
+}
+
/**
* What core implements behind the hooks. Internal: a plugin never calls this.
*/
@@ -539,6 +591,7 @@ export interface PluginHostBridge {
getApi: (pluginId: string) => PluginApiClient;
useTabs: () => TabsApi;
invokeAction: (id: string, ...args: unknown[]) => Promise;
+ useSshAuthTypes: () => { types: SshAuthTypeInfo[]; loaded: boolean };
}
let host: PluginHostBridge | null = null;
@@ -630,6 +683,17 @@ export function useTabs(): TabsApi {
return requireHost().useTabs();
}
+/**
+ * The SSH auth types this server can connect with, core's and every enabled
+ * plugin's, for pickers such as a default auth type.
+ */
+export function useSshAuthTypes(): {
+ types: SshAuthTypeInfo[];
+ loaded: boolean;
+} {
+ return requireHost().useSshAuthTypes();
+}
+
/**
* Runs an action another plugin registered, from anywhere in a plugin's code.
* Resolves undefined when nobody registered it, so an optional dependency
diff --git a/packages/plugin-sdk/src/manifest.ts b/packages/plugin-sdk/src/manifest.ts
index f0874d6f7..984dd1273 100644
--- a/packages/plugin-sdk/src/manifest.ts
+++ b/packages/plugin-sdk/src/manifest.ts
@@ -233,6 +233,20 @@ export interface PluginSettingsContribution {
host?: PluginHostSettingsContribution;
}
+/**
+ * What a plugin adds to sign-in and SSH auth. Declared so core can tell who
+ * owns an auth type or factor even while the plugin is disabled, and so the
+ * login screen knows which bundles it needs before anyone has signed in.
+ */
+export interface PluginAuthContribution {
+ /** Values of ssh_data.auth_type this plugin provides. */
+ sshAuthTypes?: string[];
+ /** Login method ids. */
+ loginMethods?: string[];
+ /** Second factor ids. */
+ secondFactors?: string[];
+}
+
export interface PluginContributions {
tabs?: PluginTabContribution[];
panels?: PluginViewContribution[];
@@ -252,6 +266,7 @@ export interface PluginContributions {
* proxmox and web-endpoint ship it today.
*/
hostCapability?: HostCapabilityContribution | HostCapabilityContribution[];
+ auth?: PluginAuthContribution;
}
export interface PluginManifest {
@@ -328,6 +343,7 @@ const ALLOWED_CONTRIBUTES = new Set([
"permissions",
"settings",
"hostCapability",
+ "auth",
]);
const ALLOWED_SETTINGS_FIELD = [
@@ -684,6 +700,44 @@ function validateContributes(
validateActionSlots(contributes.actionSlots, errors);
validateSettings(contributes.settings, errors);
validateHostCapability(contributes.hostCapability, errors);
+ validateAuthContribution(contributes.auth, errors);
+}
+
+const AUTH_ID_PATTERN = /^[a-z][a-z0-9-]{0,63}$/;
+
+function validateAuthContribution(value: unknown, errors: string[]): void {
+ if (value === undefined) return;
+ if (!isPlainObject(value)) {
+ errors.push('Field "contributes.auth" must be an object');
+ return;
+ }
+ rejectUnknown(
+ value,
+ ["sshAuthTypes", "loginMethods", "secondFactors"],
+ "contributes.auth",
+ errors,
+ );
+ for (const key of ["sshAuthTypes", "loginMethods", "secondFactors"]) {
+ const list = value[key];
+ if (list === undefined) continue;
+ if (!Array.isArray(list)) {
+ errors.push(`Field "contributes.auth.${key}" must be an array`);
+ continue;
+ }
+ const seen = new Set();
+ list.forEach((entry, index) => {
+ if (typeof entry !== "string" || !AUTH_ID_PATTERN.test(entry)) {
+ errors.push(
+ `Field "contributes.auth.${key}[${index}]" must be a lowercase id (letters, digits and dashes)`,
+ );
+ return;
+ }
+ if (seen.has(entry)) {
+ errors.push(`Duplicate "${entry}" in contributes.auth.${key}`);
+ }
+ seen.add(entry);
+ });
+ }
}
function validateSettings(settings: unknown, errors: string[]): void {
@@ -1205,6 +1259,18 @@ export function parseManifest(raw: unknown): ParsedManifest {
}
}
+ const auth = manifest.contributes?.auth;
+ const contributesAuth =
+ (auth?.sshAuthTypes?.length ?? 0) +
+ (auth?.loginMethods?.length ?? 0) +
+ (auth?.secondFactors?.length ?? 0) >
+ 0;
+ if (contributesAuth && !manifest.capabilities.includes("auth:provide")) {
+ errors.push(
+ 'contributes.auth needs the "auth:provide" capability in the capabilities array',
+ );
+ }
+
for (const secret of manifest.requiresSecret ?? []) {
if (secret.plugin === manifest.id) {
errors.push(
diff --git a/packages/plugin-sdk/src/testing.ts b/packages/plugin-sdk/src/testing.ts
index b1818d3ad..1f8c06b1c 100644
--- a/packages/plugin-sdk/src/testing.ts
+++ b/packages/plugin-sdk/src/testing.ts
@@ -18,6 +18,12 @@ import type { TermixApp } from "./frontend.js";
import type { PluginManifest } from "./manifest.js";
import type { PluginTableDefinition } from "./db.js";
import type { PluginMiddleware, PluginRouterOptions } from "./backend.js";
+import type {
+ PluginLoginMethod,
+ PluginSecondFactor,
+ PluginSshAuthProvider,
+ PluginSshHost,
+} from "./backend.js";
import type { SyncEntityRegistration } from "./backend.js";
export interface FakeContextOptions {
@@ -29,6 +35,16 @@ export interface FakeContextOptions {
settings?: Record;
/** Seed for the core settings ctx.settings.readCore can reach. */
coreSettings?: Record;
+ /** What ctx.ssh.connect and withConnection hand back as the client. */
+ sshClient?: unknown;
+}
+
+export interface FakeAuthRegistrations {
+ sshAuthProviders: PluginSshAuthProvider[];
+ loginMethods: PluginLoginMethod[];
+ secondFactors: PluginSecondFactor[];
+ /** ":" for every recorded enrolment. */
+ enrollments: Set;
}
export interface FakePluginContext {
@@ -51,6 +67,10 @@ export interface FakePluginContext {
settings: Map;
/** Core settings readable through ctx.settings.readCore. */
coreSettings: Map;
+ /** Every ctx.ssh.connect and withConnection call, in order. */
+ sshConnections: Array<{ host: number | PluginSshHost; pool?: string }>;
+ /** Everything registered through ctx.auth. */
+ auth: FakeAuthRegistrations;
}
/** How a settings row is keyed in the doubles. Mirrors the real unique index. */
@@ -93,6 +113,14 @@ export function createFakeContext(
Object.entries(options.coreSettings ?? {}),
);
const settingsListeners = new Map void>>();
+ const sshConnections: FakePluginContext["sshConnections"] = [];
+ const auth: FakeAuthRegistrations = {
+ sshAuthProviders: [],
+ loginMethods: [],
+ secondFactors: [],
+ enrollments: new Set(),
+ };
+ const sshClient = options.sshClient ?? {};
let actor = options.actor;
for (const [key, value] of Object.entries(options.settings ?? {})) {
@@ -267,6 +295,64 @@ export function createFakeContext(
disposables,
+ ssh: {
+ connect: async (host) => {
+ sshConnections.push({ host });
+ return {
+ client: sshClient as never,
+ jumpClient: null,
+ dispose: () => {},
+ };
+ },
+ withConnection: async (host, connectOptions, fn) => {
+ sshConnections.push({ host, pool: connectOptions.pool });
+ return fn(sshClient as never);
+ },
+ jumpChain: async () => ({
+ client: sshClient as never,
+ jumpClient: null,
+ dispose: () => {},
+ }),
+ poolKey: (pool, host) =>
+ `${pool}:${host.userId}:${host.ip}:${host.port}:${host.username}`,
+ prepare: async () => ({ config: {}, outcome: { status: "ready" } }),
+ openTransport: async () => ({ jumpClient: null, via: "direct" }),
+ classifyKeyboardInteractive: ({ prompts }, host) => ({
+ kind: "auto",
+ responses: prompts.map((p) =>
+ /password/i.test(p.prompt) && typeof host.password === "string"
+ ? host.password
+ : "",
+ ),
+ }),
+ autoResponses: (prompts, password) =>
+ prompts.map((p) =>
+ /password/i.test(p.prompt) && password ? password : "",
+ ),
+ requiresSecret: (authType) =>
+ ["password", "key", "credential", "agent"].includes(authType),
+ supportsBackground: (authType) =>
+ !["none", "opkssh", "stepca"].includes(authType),
+ },
+
+ auth: {
+ registerSshAuthProvider: (provider) => {
+ auth.sshAuthProviders.push(provider);
+ },
+ registerLoginMethod: (method) => {
+ auth.loginMethods.push(method);
+ },
+ registerSecondFactor: (factor) => {
+ auth.secondFactors.push(factor);
+ },
+ recordEnrollment: async (userId, factorId) => {
+ auth.enrollments.add(`${userId}:${factorId}`);
+ },
+ removeEnrollment: async (userId, factorId) => {
+ auth.enrollments.delete(`${userId}:${factorId}`);
+ },
+ },
+
asUser: async (userId, fn) => {
const previous = actor;
actor = userId;
@@ -291,6 +377,8 @@ export function createFakeContext(
httpRouters,
settings,
coreSettings,
+ sshConnections,
+ auth,
};
}
@@ -307,6 +395,8 @@ export interface MockContextOptions {
coreSettings?: Record;
/** Acting user returned by currentActor and used by asUser. */
actor?: string;
+ /** What ctx.ssh.connect and withConnection hand back as the client. */
+ sshClient?: unknown;
}
export interface MockPluginContext extends FakePluginContext {
@@ -320,8 +410,9 @@ export interface MockPluginContext extends FakePluginContext {
*
* The gates on today's ctx surface: kv:own on every ctx.kv call, db:own on
* ctx.db, network:serve on ctx.http and ctx.ws, events:core on emitting a
- * topic outside the plugin's own namespace, and settings:read-core on
- * ctx.settings.readCore. Reading a plugin's own settings is deliberately
+ * topic outside the plugin's own namespace, settings:read-core on
+ * ctx.settings.readCore, ssh:connect plus credentials:use on ctx.ssh, and
+ * auth:provide on ctx.auth. Reading a plugin's own settings is deliberately
* ungated. As the SDK grows a member, add its gate here in the same shape.
*/
export function createMockCtx(
@@ -335,6 +426,7 @@ export function createMockCtx(
actor: options.actor,
settings: options.settings,
coreSettings: options.coreSettings,
+ sshClient: options.sshClient,
manifest: {
capabilities: options.capabilities ?? [],
...options.manifest,
@@ -437,6 +529,57 @@ export function createMockCtx(
return ctx.settings.readCore(key);
},
},
+
+ ssh: {
+ ...ctx.ssh,
+ connect: async (host, connectOptions) => {
+ require("ssh:connect");
+ require("credentials:use");
+ return ctx.ssh.connect(host, connectOptions);
+ },
+ withConnection: async (host, connectOptions, fn) => {
+ require("ssh:connect");
+ require("credentials:use");
+ return ctx.ssh.withConnection(host, connectOptions, fn);
+ },
+ prepare: async (host, prepareOptions) => {
+ require("ssh:connect");
+ require("credentials:use");
+ return ctx.ssh.prepare(host, prepareOptions);
+ },
+ openTransport: async (host, config) => {
+ require("ssh:connect");
+ return ctx.ssh.openTransport(host, config);
+ },
+ jumpChain: async (jumpHosts, chainOptions) => {
+ require("ssh:connect");
+ require("credentials:use");
+ return ctx.ssh.jumpChain(jumpHosts, chainOptions);
+ },
+ },
+
+ auth: {
+ registerSshAuthProvider: (provider) => {
+ require("auth:provide");
+ ctx.auth.registerSshAuthProvider(provider);
+ },
+ registerLoginMethod: (method) => {
+ require("auth:provide");
+ ctx.auth.registerLoginMethod(method);
+ },
+ registerSecondFactor: (factor) => {
+ require("auth:provide");
+ ctx.auth.registerSecondFactor(factor);
+ },
+ recordEnrollment: async (userId, factorId) => {
+ require("auth:provide");
+ return ctx.auth.recordEnrollment(userId, factorId);
+ },
+ removeEnrollment: async (userId, factorId) => {
+ require("auth:provide");
+ return ctx.auth.removeEnrollment(userId, factorId);
+ },
+ },
};
return { ...base, ctx: gatedCtx, checked };
diff --git a/packages/plugin-sdk/src/testing/setup.ts b/packages/plugin-sdk/src/testing/setup.ts
index 366468fd5..fe8d31317 100644
--- a/packages/plugin-sdk/src/testing/setup.ts
+++ b/packages/plugin-sdk/src/testing/setup.ts
@@ -101,6 +101,16 @@ const offline = () =>
onReady: () => noop,
}),
invokeAction: async () => undefined,
+ useSshAuthTypes: () => ({
+ types: ["password", "key", "credential", "agent", "none"].map((type) => ({
+ type,
+ labelKey: type,
+ pluginId: "core",
+ credentialType: type === "password" || type === "key",
+ supportsBackground: type !== "none",
+ })),
+ loaded: true,
+ }),
};
afterEach(() => {
diff --git a/plugins/ai/src/backend/index.ts b/plugins/ai/src/backend/index.ts
index 05cb047e0..56a2a4744 100644
--- a/plugins/ai/src/backend/index.ts
+++ b/plugins/ai/src/backend/index.ts
@@ -1,8 +1,11 @@
import type { PluginContext } from "@termix/plugin-sdk/backend";
+import { setPluginSsh } from "./ssh.js";
import { startAiService, stopAiService } from "./routes.js";
import { createCurrentAiRepository } from "../../../../src/backend/database/repositories/factory.js";
export async function activate(ctx: PluginContext) {
+ setPluginSsh(ctx.ssh);
+ ctx.disposables.add(() => setPluginSsh(null));
startAiService(ctx.http.router());
// Offered by reference, not copied: this hands over a resolver, so the key
diff --git a/plugins/ai/src/backend/ssh.ts b/plugins/ai/src/backend/ssh.ts
new file mode 100644
index 000000000..b7a221543
--- /dev/null
+++ b/plugins/ai/src/backend/ssh.ts
@@ -0,0 +1,36 @@
+import type { Client } from "ssh2";
+import type {
+ PluginSsh,
+ PluginSshConnection,
+ PluginSshConnectOptions,
+ PluginSshHost,
+} from "@termix/plugin-sdk/backend";
+
+let current: PluginSsh | null = null;
+
+/** Set in activate, cleared on deactivate. */
+export function setPluginSsh(ssh: PluginSsh | null): void {
+ current = ssh;
+}
+
+export function pluginSsh(): PluginSsh {
+ if (!current) throw new Error("The plugin is not active");
+ return current;
+}
+
+/** withConnection with ssh2's Client type filled in. */
+export function withSshConnection(
+ host: number | PluginSshHost,
+ options: PluginSshConnectOptions & { pool: string },
+ fn: (client: Client) => Promise,
+): Promise {
+ return pluginSsh().withConnection(host, options, fn);
+}
+
+/** connect with ssh2's Client type filled in. */
+export function connectSsh(
+ host: number | PluginSshHost,
+ options?: PluginSshConnectOptions,
+): Promise> {
+ return pluginSsh().connect(host, options);
+}
diff --git a/plugins/ai/src/backend/tools/executor.ts b/plugins/ai/src/backend/tools/executor.ts
index a4bb867e6..dd20cf524 100644
--- a/plugins/ai/src/backend/tools/executor.ts
+++ b/plugins/ai/src/backend/tools/executor.ts
@@ -7,11 +7,7 @@ import {
import { validateDefinition } from "../../../../automations/src/backend/routes.js";
import { resolveHostById } from "../../../../../src/backend/hosts/host-resolver.js";
import { execCommand } from "../../../../../src/backend/hosts/metrics-shared/common-utils.js";
-import {
- createFleetSshFactory,
- getFleetPoolKey,
-} from "../../../../../src/backend/hosts/ssh-client-factory.js";
-import { withConnection } from "../../../../../src/backend/hosts/ssh-connection-pool.js";
+import { withSshConnection } from "../ssh.js";
import { getTool } from "./catalog.js";
/** Approved commands get a bounded window rather than hanging the request. */
@@ -277,9 +273,9 @@ async function runCommandOnHost(
command: string,
): Promise<{ output?: string; error?: string }> {
try {
- const result = await withConnection(
- getFleetPoolKey(host as any),
- createFleetSshFactory(host as any),
+ const result = await withSshConnection(
+ host as any as never,
+ { pool: "fleet", purpose: "fleet" },
async (client) => execCommand(client, command, COMMAND_TIMEOUT_MS),
);
diff --git a/plugins/ai/tests/backend/tools/proposal-executor.test.ts b/plugins/ai/tests/backend/tools/proposal-executor.test.ts
index 3e2aad620..796742e46 100644
--- a/plugins/ai/tests/backend/tools/proposal-executor.test.ts
+++ b/plugins/ai/tests/backend/tools/proposal-executor.test.ts
@@ -34,14 +34,10 @@ vi.mock(
execCommand: (...args: unknown[]) => execCommand(...args),
}),
);
-vi.mock("../../../../../src/backend/hosts/ssh-client-factory.js", () => ({
- createFleetSshFactory: () => () => ({}),
- getFleetPoolKey: () => "pool",
-}));
-vi.mock("../../../../../src/backend/hosts/ssh-connection-pool.js", () => ({
- withConnection: async (
- _key: string,
- _factory: unknown,
+vi.mock("../../../src/backend/ssh.js", () => ({
+ withSshConnection: async (
+ _host: unknown,
+ _options: unknown,
run: (client: unknown) => Promise,
) => run({}),
}));
diff --git a/plugins/automations/src/backend/actions/index.ts b/plugins/automations/src/backend/actions/index.ts
index bebd1e974..25b8639ea 100644
--- a/plugins/automations/src/backend/actions/index.ts
+++ b/plugins/automations/src/backend/actions/index.ts
@@ -7,11 +7,7 @@ import {
execElevated,
shellSingleQuote,
} from "../../../../../src/backend/hosts/metrics-shared/exec-elevated.js";
-import {
- createFleetSshFactory,
- getFleetPoolKey,
-} from "../../../../../src/backend/hosts/ssh-client-factory.js";
-import { withConnection } from "../../../../../src/backend/hosts/ssh-connection-pool.js";
+import { withSshConnection } from "../ssh.js";
import { resolveSnippetCommand } from "../../../../../src/backend/database/routes/snippets-execution.js";
import {
createCurrentNotificationChannelRepository,
@@ -383,9 +379,9 @@ async function execOnHost(
if (timeout <= 0) return { error: "Run deadline exceeded" };
try {
- const result = await withConnection(
- getFleetPoolKey(sshHost),
- createFleetSshFactory(sshHost),
+ const result = await withSshConnection(
+ sshHost as never,
+ { pool: "fleet", purpose: "fleet" },
async (client) => {
if (elevated) {
return execElevated(client, command, sshHost.sudoPassword, {
diff --git a/plugins/automations/src/backend/docker-watcher.ts b/plugins/automations/src/backend/docker-watcher.ts
index 719e60f02..672d3dbfc 100644
--- a/plugins/automations/src/backend/docker-watcher.ts
+++ b/plugins/automations/src/backend/docker-watcher.ts
@@ -3,11 +3,7 @@ import { createCurrentAutomationRepository } from "../../../../src/backend/datab
import { resolveHostById } from "../../../../src/backend/hosts/host-resolver.js";
import { DataCrypto } from "../../../../src/backend/utils/data-crypto.js";
import { execCommand } from "../../../../src/backend/hosts/metrics-shared/common-utils.js";
-import {
- createFleetSshFactory,
- getFleetPoolKey,
-} from "../../../../src/backend/hosts/ssh-client-factory.js";
-import { withConnection } from "../../../../src/backend/hosts/ssh-connection-pool.js";
+import { withSshConnection } from "./ssh.js";
import { statsLogger } from "../../../../src/backend/utils/logger.js";
import { onDockerEvent } from "./triggers.js";
@@ -154,9 +150,9 @@ async function pollHost(hostId: number, userId: string): Promise {
return;
}
- const result = await withConnection(
- getFleetPoolKey(host as never),
- createFleetSshFactory(host as never),
+ const result = await withSshConnection(
+ host as never as never,
+ { pool: "fleet", purpose: "fleet" },
(client) =>
execCommand(
client,
diff --git a/plugins/automations/src/backend/index.ts b/plugins/automations/src/backend/index.ts
index 357ae2219..638751542 100644
--- a/plugins/automations/src/backend/index.ts
+++ b/plugins/automations/src/backend/index.ts
@@ -1,4 +1,5 @@
import type { PluginContext } from "@termix/plugin-sdk/backend";
+import { setPluginSsh } from "./ssh.js";
import { startAutomationsService, stopAutomationsService } from "./routes.js";
import {
startAutomationScheduler,
@@ -6,6 +7,8 @@ import {
} from "./scheduler.js";
export async function activate(ctx: PluginContext) {
+ setPluginSsh(ctx.ssh);
+ ctx.disposables.add(() => setPluginSsh(null));
startAutomationsService(
// The webhook route authenticates on its own per-automation token rather
// than a session, which is the point of an inbound webhook.
diff --git a/plugins/automations/src/backend/ssh.ts b/plugins/automations/src/backend/ssh.ts
new file mode 100644
index 000000000..b7a221543
--- /dev/null
+++ b/plugins/automations/src/backend/ssh.ts
@@ -0,0 +1,36 @@
+import type { Client } from "ssh2";
+import type {
+ PluginSsh,
+ PluginSshConnection,
+ PluginSshConnectOptions,
+ PluginSshHost,
+} from "@termix/plugin-sdk/backend";
+
+let current: PluginSsh | null = null;
+
+/** Set in activate, cleared on deactivate. */
+export function setPluginSsh(ssh: PluginSsh | null): void {
+ current = ssh;
+}
+
+export function pluginSsh(): PluginSsh {
+ if (!current) throw new Error("The plugin is not active");
+ return current;
+}
+
+/** withConnection with ssh2's Client type filled in. */
+export function withSshConnection(
+ host: number | PluginSshHost,
+ options: PluginSshConnectOptions & { pool: string },
+ fn: (client: Client) => Promise,
+): Promise {
+ return pluginSsh().withConnection(host, options, fn);
+}
+
+/** connect with ssh2's Client type filled in. */
+export function connectSsh(
+ host: number | PluginSshHost,
+ options?: PluginSshConnectOptions,
+): Promise> {
+ return pluginSsh().connect(host, options);
+}
diff --git a/plugins/docker/src/backend/console.ts b/plugins/docker/src/backend/console.ts
index a7f7b7eb0..51cc3aee8 100644
--- a/plugins/docker/src/backend/console.ts
+++ b/plugins/docker/src/backend/console.ts
@@ -3,20 +3,18 @@
// packages/plugin-sdk/cli/lib/legacy-core-imports.mjs.
import { getErrorMessage } from "../../../../src/backend/utils/error-message.js";
import { StringDecoder } from "string_decoder";
-import { Client as SSHClient } from "ssh2";
-import { SSH_ALGORITHMS } from "../../../../src/backend/utils/ssh-algorithms.js";
+import type { Client as SSHClient } from "ssh2";
+import type { PluginSshHost } from "@termix/plugin-sdk/backend";
+import { connectSsh } from "./ssh.js";
import { WebSocketServer, WebSocket } from "ws";
import { AuthManager } from "../../../../src/backend/utils/auth-manager.js";
-import { createCurrentHostResolutionRepository } from "../../../../src/backend/database/repositories/factory.js";
import { systemLogger } from "../../../../src/backend/utils/logger.js";
import type { SSHHost } from "../../../../src/types/index.js";
-import { applyAgentAuth } from "../../../../src/backend/hosts/terminal-auth-helpers.js";
import {
containerCommand,
getContainerRuntimeConfig,
type ContainerRuntime,
} from "./container-runtime.js";
-import { resolveSshConnectConfigHost } from "../../../../src/backend/hosts/ssh-dns.js";
import {
hostAddressMismatch,
HOST_ADDRESS_MISMATCH_MESSAGE,
@@ -151,197 +149,6 @@ async function detectShell(
return "sh";
}
-async function createJumpHostChain(
- jumpHosts: Array<{ hostId: number }>,
- userId: string,
-): Promise {
- if (!jumpHosts || jumpHosts.length === 0) {
- return null;
- }
-
- let currentClient: SSHClient | null = null;
- const repository = createCurrentHostResolutionRepository();
-
- for (let i = 0; i < jumpHosts.length; i++) {
- const jumpHostId = jumpHosts[i].hostId;
-
- const resolvedJumpHost = await repository.findHostById(jumpHostId, userId);
- if (!resolvedJumpHost || resolvedJumpHost.userId !== userId) {
- throw new Error(`Jump host ${jumpHostId} not found`);
- }
-
- const jumpHost = resolvedJumpHost as unknown as SSHHost;
- if (typeof jumpHost.jumpHosts === "string" && jumpHost.jumpHosts) {
- try {
- jumpHost.jumpHosts = JSON.parse(jumpHost.jumpHosts);
- } catch (e) {
- sshLogger.error("Failed to parse jump hosts", e, {
- hostId: jumpHost.id,
- });
- jumpHost.jumpHosts = [];
- }
- }
-
- let resolvedCredentials: {
- password?: string;
- sshKey?: string;
- keyPassword?: string;
- authType?: string;
- } = {
- password: jumpHost.password,
- sshKey: jumpHost.key,
- keyPassword: jumpHost.keyPassword,
- authType: jumpHost.authType,
- };
-
- if (jumpHost.credentialId) {
- const credential = await repository.findCredentialByIdForUser(
- jumpHost.credentialId as number,
- userId,
- );
-
- if (credential) {
- resolvedCredentials = {
- password: credential.password as string | undefined,
- sshKey: (credential.key || credential.privateKey) as
- string | undefined,
- keyPassword: credential.keyPassword as string | undefined,
- authType: credential.authType as string | undefined,
- };
- }
- }
-
- const client = new SSHClient();
-
- const config: Record = {
- host: jumpHost.ip?.replace(/^\[|\]$/g, "") || jumpHost.ip,
- port: jumpHost.port || 22,
- username: jumpHost.username,
- tryKeyboard: resolvedCredentials.authType !== "none",
- readyTimeout: 60000,
- keepaliveInterval: 30000,
- keepaliveCountMax: 120,
- tcpKeepAlive: true,
- tcpKeepAliveInitialDelay: 30000,
- algorithms: {
- kex: [
- "curve25519-sha256",
- "curve25519-sha256@libssh.org",
- "ecdh-sha2-nistp521",
- "ecdh-sha2-nistp384",
- "ecdh-sha2-nistp256",
- "diffie-hellman-group-exchange-sha256",
- "diffie-hellman-group18-sha512",
- "diffie-hellman-group17-sha512",
- "diffie-hellman-group16-sha512",
- "diffie-hellman-group15-sha512",
- "diffie-hellman-group14-sha256",
- "diffie-hellman-group14-sha1",
- "diffie-hellman-group-exchange-sha1",
- "diffie-hellman-group1-sha1",
- ],
- serverHostKey: [
- "ssh-ed25519",
- "ecdsa-sha2-nistp521",
- "ecdsa-sha2-nistp384",
- "ecdsa-sha2-nistp256",
- "rsa-sha2-512",
- "rsa-sha2-256",
- "ssh-rsa",
- "ssh-dss",
- ],
- cipher: SSH_ALGORITHMS.cipher,
- hmac: [
- "hmac-sha2-512-etm@openssh.com",
- "hmac-sha2-256-etm@openssh.com",
- "hmac-sha2-512",
- "hmac-sha2-256",
- "hmac-sha1",
- "hmac-md5",
- ],
- compress: ["none", "zlib@openssh.com", "zlib"],
- },
- };
-
- if (
- resolvedCredentials.authType === "password" &&
- resolvedCredentials.password
- ) {
- config.password = resolvedCredentials.password;
- } else if (
- resolvedCredentials.authType === "key" &&
- resolvedCredentials.sshKey
- ) {
- const cleanKey = resolvedCredentials.sshKey
- .trim()
- .replace(/\r\n/g, "\n")
- .replace(/\r/g, "\n");
- config.privateKey = Buffer.from(cleanKey, "utf8");
- if (resolvedCredentials.keyPassword) {
- config.passphrase = resolvedCredentials.keyPassword;
- }
- } else if (resolvedCredentials.authType === "agent") {
- const result = await applyAgentAuth(
- config,
- jumpHost.terminalConfig as unknown as
- Record | undefined,
- );
- if ("error" in result) {
- throw new Error(result.error);
- }
- }
-
- client.on(
- "keyboard-interactive",
- (
- _name: string,
- _instructions: string,
- _lang: string,
- prompts: Array<{ prompt: string; echo: boolean }>,
- finish: (responses: string[]) => void,
- ) => {
- const responses = prompts.map((p) => {
- if (/password/i.test(p.prompt) && resolvedCredentials.password) {
- return resolvedCredentials.password as string;
- }
- return "";
- });
- finish(responses);
- },
- );
-
- if (currentClient) {
- await new Promise((resolve, reject) => {
- currentClient!.forwardOut(
- "127.0.0.1",
- 0,
- jumpHost.ip,
- jumpHost.port || 22,
- (err, stream) => {
- if (err) return reject(err);
- config.sock = stream;
- resolve();
- },
- );
- });
- }
-
- if (!config.sock) {
- await resolveSshConnectConfigHost(config);
- }
-
- await new Promise((resolve, reject) => {
- client.on("ready", () => resolve());
- client.on("error", reject);
- client.connect(config);
- });
-
- currentClient = client;
- }
-
- return currentClient;
-}
-
async function onConsoleConnection(
ws: WebSocket,
req: import("http").IncomingMessage,
@@ -514,81 +321,15 @@ async function onConsoleConnection(
return;
}
- const client = new SSHClient();
-
- const config: Record = {
- host: resolvedHost.ip?.replace(/^\[|\]$/g, "") || resolvedHost.ip,
- port: resolvedHost.port || 22,
- username: resolvedHost.username,
- tryKeyboard: true,
- readyTimeout: 60000,
- keepaliveInterval: 30000,
- keepaliveCountMax: 120,
- tcpKeepAlive: true,
- tcpKeepAliveInitialDelay: 30000,
- };
-
- if (resolvedHost.authType === "password" && resolvedHost.password) {
- config.password = resolvedHost.password;
- } else if (resolvedHost.authType === "key" && resolvedHost.key) {
- const cleanKey = resolvedHost.key
- .trim()
- .replace(/\r\n/g, "\n")
- .replace(/\r/g, "\n");
- config.privateKey = Buffer.from(cleanKey, "utf8");
- if (resolvedHost.keyPassword) {
- config.passphrase = resolvedHost.keyPassword;
- }
- } else if (resolvedHost.authType === "agent") {
- const result = await applyAgentAuth(
- config,
- resolvedHost.terminalConfig as unknown as
- Record | undefined,
- );
- if ("error" in result) {
- ws.send(
- JSON.stringify({
- type: "error",
- message: result.error,
- }),
- );
- return;
- }
- }
-
- if (resolvedHost.jumpHosts && resolvedHost.jumpHosts.length > 0) {
- const jumpClient = await createJumpHostChain(
- resolvedHost.jumpHosts,
+ // The console socket is public and authenticates itself, so the
+ // acting user is carried on the host rather than the request.
+ const { client } = await connectSsh(
+ {
+ ...(resolvedHost as unknown as PluginSshHost),
userId,
- );
- if (jumpClient) {
- const stream = await new Promise(
- (resolve, reject) => {
- jumpClient.forwardOut(
- "127.0.0.1",
- 0,
- resolvedHost.ip,
- resolvedHost.port || 22,
- (err, stream) => {
- if (err) return reject(err);
- resolve(stream);
- },
- );
- },
- );
- config.sock = stream;
- }
- }
-
- if (!config.sock) {
- await resolveSshConnectConfigHost(config);
- }
-
- await new Promise((resolve, reject) => {
- client.on("ready", () => resolve());
- client.on("error", reject);
- client.connect(config);
- });
+ } as PluginSshHost,
+ { purpose: "docker-console", timeoutMs: 65000 },
+ );
const { runtime: containerRuntime } = getContainerRuntimeConfig(
resolvedHost.dockerConfig,
diff --git a/plugins/docker/src/backend/index.ts b/plugins/docker/src/backend/index.ts
index c09856de8..edbc3c06f 100644
--- a/plugins/docker/src/backend/index.ts
+++ b/plugins/docker/src/backend/index.ts
@@ -1,5 +1,6 @@
import express, { type Router } from "express";
import type { PluginContext } from "@termix/plugin-sdk/backend";
+import { setPluginSsh } from "./ssh.js";
import { logger } from "../../../../src/backend/utils/logger.js";
import { AuthManager } from "../../../../src/backend/utils/auth-manager.js";
import { registerDockerContainerRoutes } from "./container-routes.js";
@@ -23,6 +24,8 @@ let authManagerInstance: ReturnType | null =
null;
export async function activate(ctx: PluginContext) {
+ setPluginSsh(ctx.ssh);
+ ctx.disposables.add(() => setPluginSsh(null));
// An express app rather than the router directly, so the existing
// register*Routes helpers keep the Application they expect. Core mounts it
// at /plugin-api/docker and runs compression, CORS, cookies, auth and body
diff --git a/plugins/docker/src/backend/routes.ts b/plugins/docker/src/backend/routes.ts
index d9860a15f..4cb3b0477 100644
--- a/plugins/docker/src/backend/routes.ts
+++ b/plugins/docker/src/backend/routes.ts
@@ -2,10 +2,11 @@
// The plugin build rewrites the prefix to the compiled output path; see
// packages/plugin-sdk/cli/lib/legacy-core-imports.mjs.
import { getErrorMessage } from "../../../../src/backend/utils/error-message.js";
-import { usesIssuedCertificate } from "../../../../src/backend/hosts/issued-certificate-auth.js";
import express from "express";
import axios from "axios";
import { Client as SSHClient } from "ssh2";
+import type { PluginSshHost } from "@termix/plugin-sdk/backend";
+import { pluginSsh } from "./ssh.js";
import { logger } from "../../../../src/backend/utils/logger.js";
import {
logAudit,
@@ -13,33 +14,23 @@ import {
getRequestMeta,
} from "../../../../src/backend/utils/audit-logger.js";
import { createCurrentHostRepository } from "../../../../src/backend/database/repositories/factory.js";
-import { createJumpHostChain } from "../../../../src/backend/hosts/jump-host-chain.js";
import { resolveHostById } from "../../../../src/backend/hosts/host-resolver.js";
import { createConnectionLog } from "../../../../src/backend/hosts/connection-log.js";
import { DataCrypto } from "../../../../src/backend/utils/data-crypto.js";
import { AuthManager } from "../../../../src/backend/utils/auth-manager.js";
import type {
AuthenticatedRequest,
- ProxyNode,
SSHHost,
} from "../../../../src/types/index.js";
-import {
- createSocks5Connection,
- type SOCKS5Config,
-} from "../../../../src/backend/utils/socks5-helper.js";
import type {
LogEntry,
ConnectionStage,
} from "../../../../src/types/connection-log.js";
-import { SSHHostKeyVerifier } from "../../../../src/backend/hosts/host-key-verifier.js";
-import { preparePrivateKeyForSSH2 } from "../../../../src/backend/utils/ssh-key-utils.js";
-import { applyAgentAuth } from "../../../../src/backend/hosts/terminal-auth-helpers.js";
import {
containerCommand,
getContainerRuntimeConfig,
getRuntimeLabel,
} from "./container-runtime.js";
-import { resolveSshConnectConfigHost } from "../../../../src/backend/hosts/ssh-dns.js";
import {
type SSHSession,
sshSessions,
@@ -242,200 +233,69 @@ export function registerDockerSshRoutes(app: express.Express): void {
delete pendingTOTPSessions[sessionId];
}
- const resolvedCredentials: {
- password?: string;
- sshKey?: string;
- keyPassword?: string;
- authType?: string;
- } = {
- password: host.password,
- sshKey: host.key,
- keyPassword: host.keyPassword,
- authType: host.authType,
- };
-
+ const connectTarget = {
+ ...(host as unknown as PluginSshHost),
+ id: hostId,
+ port: host.port || 22,
+ userId,
+ // The Docker panel sends its own proxy settings with the request.
+ useSocks5,
+ socks5Host,
+ socks5Port,
+ socks5Username,
+ socks5Password,
+ socks5ProxyChain,
+ } as PluginSshHost;
if (userProvidedPassword) {
- resolvedCredentials.password = userProvidedPassword;
- resolvedCredentials.authType = "password";
+ connectTarget.password = userProvidedPassword;
+ connectTarget.authType = "password";
}
if (userProvidedSshKey) {
- resolvedCredentials.sshKey = userProvidedSshKey;
- resolvedCredentials.authType = "key";
+ connectTarget.key = userProvidedSshKey;
+ connectTarget.authType = "key";
}
if (userProvidedKeyPassword) {
- resolvedCredentials.keyPassword = userProvidedKeyPassword;
+ connectTarget.keyPassword = userProvidedKeyPassword;
}
+ const resolvedPassword = connectTarget.password as string | undefined;
+ const authType = (connectTarget.authType as string) || "none";
const client = new SSHClient();
-
- const config: Record = {
- host: host.ip?.replace(/^\[|\]$/g, "") || host.ip,
- port: host.port || 22,
- username: host.username,
- tryKeyboard: true,
- keepaliveInterval:
- typeof host.terminalConfig?.keepaliveInterval === "number"
- ? host.terminalConfig.keepaliveInterval * 1000
- : 60000,
- keepaliveCountMax:
- typeof host.terminalConfig?.keepaliveCountMax === "number"
- ? host.terminalConfig.keepaliveCountMax
- : 5,
- readyTimeout: 60000,
- tcpKeepAlive: true,
- tcpKeepAliveInitialDelay: 30000,
- hostVerifier: await SSHHostKeyVerifier.createHostVerifier(
- hostId,
- host.ip,
- host.port || 22,
- null,
- userId,
- false,
- ),
- };
-
- if (
- resolvedCredentials.authType === "none" ||
- resolvedCredentials.authType === "tailscale" ||
- resolvedCredentials.authType === "warpgate"
- ) {
- // Tailscale SSH, "none", and Warpgate auth: no static credentials
- } else if (resolvedCredentials.authType === "password") {
- if (resolvedCredentials.password) {
- config.password = resolvedCredentials.password;
- }
- } else if (usesIssuedCertificate(resolvedCredentials.authType)) {
- try {
- const { getOPKSSHToken } =
- await import("../../../../src/backend/hosts/opkssh-auth.js");
- const token = await getOPKSSHToken(userId, hostId);
-
- if (!token) {
- connectionLogs.push(
- createConnectionLog(
- "error",
- "docker_auth",
- "OPKSSH authentication required. Please open a Terminal connection to this host first to complete browser-based authentication. Your session will be cached for 24 hours.",
- ),
- );
- return res.status(401).json({
- error:
- "OPKSSH authentication required. Please open a Terminal connection to this host first to complete browser-based authentication. Your session will be cached for 24 hours.",
- requiresOPKSSHAuth: true,
- connectionLogs,
- });
- }
-
- const { setupOPKSSHCertAuth } =
- await import("../../../../src/backend/hosts/opkssh-cert-auth.js");
- await setupOPKSSHCertAuth(
- config as import("ssh2").ConnectConfig,
- client,
- token,
- host.username,
- );
+ const ssh = pluginSsh();
+ const prepared = await ssh.prepare(connectTarget, {
+ purpose: "docker",
+ client,
+ log: (level, message) =>
connectionLogs.push(
- createConnectionLog(
- "info",
- "docker_auth",
- "Using OPKSSH certificate authentication",
- ),
- );
- } catch (opksshError) {
- sshLogger.error("OPKSSH authentication error for Docker", {
- operation: "docker_connect",
- sessionId,
- hostId,
- error: getErrorMessage(opksshError),
- });
- connectionLogs.push(
- createConnectionLog(
- "error",
- "docker_auth",
- `OPKSSH authentication failed: ${getErrorMessage(opksshError)}`,
- ),
- );
- return res.status(500).json({
- error: "OPKSSH authentication failed",
+ createConnectionLog(level, "docker_auth", message),
+ ),
+ });
+ const config = prepared.config;
+
+ if (prepared.outcome.status !== "ready") {
+ const outcome = prepared.outcome;
+ connectionLogs.push(
+ createConnectionLog("error", "docker_auth", outcome.message),
+ );
+ if (outcome.status === "interaction-required") {
+ return res.status(401).json({
+ error: outcome.message,
+ requiresAuthInteraction: outcome.interaction,
+ ...(outcome.flag ? { [outcome.flag]: true } : {}),
connectionLogs,
});
}
- } else if (
- resolvedCredentials.authType === "key" &&
- resolvedCredentials.sshKey
- ) {
- try {
- config.privateKey = preparePrivateKeyForSSH2(
- resolvedCredentials.sshKey,
- resolvedCredentials.keyPassword,
- );
- if (resolvedCredentials.keyPassword) {
- config.passphrase = resolvedCredentials.keyPassword;
- }
- } catch (error) {
- const message = getErrorMessage(error, "Invalid private key format");
- sshLogger.error("SSH key processing error", error, {
- operation: "docker_connect",
- sessionId,
- hostId,
- });
- connectionLogs.push(
- createConnectionLog(
- "error",
- "docker_auth",
- `SSH key processing error: ${message}`,
- ),
- );
- return res.status(400).json({
- error: `SSH key format error: ${message}`,
- connectionLogs,
- });
- }
- } else if (resolvedCredentials.authType === "key") {
- sshLogger.error(
- "SSH key authentication requested but no key provided",
- {
- operation: "docker_connect",
- sessionId,
- hostId,
- },
- );
- connectionLogs.push(
- createConnectionLog(
- "error",
- "docker_auth",
- "SSH key authentication requested but no key provided",
- ),
- );
- return res.status(400).json({
- error: "SSH key authentication requested but no key provided",
- connectionLogs,
- });
- } else if (resolvedCredentials.authType === "agent") {
- const result = await applyAgentAuth(
- config,
- host.terminalConfig as unknown as Record | undefined,
- );
- if ("error" in result) {
- connectionLogs.push(
- createConnectionLog("error", "docker_auth", result.error),
- );
- return res.status(400).json({ error: result.error, connectionLogs });
- }
- connectionLogs.push(
- createConnectionLog(
- "info",
- "docker_auth",
- "Using SSH agent authentication",
- ),
- );
+ return res.status(400).json({ error: outcome.message, connectionLogs });
}
+ // Auth types with no stored secret answer a password prompt with
+ // "auth_required" so the panel can ask for credentials.
+ const credentialless = !ssh.requiresSecret(authType);
+
let responseSent = false;
connectionLogs.push(
createConnectionLog("info", "dns", `Resolving DNS for ${host.ip}`),
);
-
connectionLogs.push(
createConnectionLog(
"info",
@@ -443,36 +303,10 @@ export function registerDockerSshRoutes(app: express.Express): void {
`Connecting to ${host.ip}:${host.port || 22}`,
),
);
-
connectionLogs.push(
createConnectionLog("info", "handshake", "Initiating SSH handshake"),
);
- if (resolvedCredentials.authType === "password") {
- connectionLogs.push(
- createConnectionLog("info", "auth", "Authenticating with password"),
- );
- } else if (resolvedCredentials.authType === "key") {
- connectionLogs.push(
- createConnectionLog("info", "auth", "Authenticating with SSH key"),
- );
- } else if (resolvedCredentials.authType === "agent") {
- connectionLogs.push(
- createConnectionLog("info", "auth", "Authenticating with SSH agent"),
- );
- } else if (
- resolvedCredentials.authType === "none" ||
- resolvedCredentials.authType === "tailscale"
- ) {
- connectionLogs.push(
- createConnectionLog(
- "info",
- "auth",
- "Attempting keyboard-interactive authentication",
- ),
- );
- }
-
client.on("ready", () => {
if (responseSent) return;
responseSent = true;
@@ -630,8 +464,7 @@ export function registerDockerSshRoutes(app: express.Express): void {
}
if (
- (resolvedCredentials.authType === "none" ||
- resolvedCredentials.authType === "tailscale") &&
+ credentialless &&
(err.message.includes("authentication") ||
err.message.includes(
"All configured authentication methods failed",
@@ -662,388 +495,171 @@ export function registerDockerSshRoutes(app: express.Express): void {
}
});
+ const parkForAnswer = (
+ finish: (responses: string[]) => void,
+ prompts: Array<{ prompt: string; echo: boolean }>,
+ promptIndex: number,
+ isWarpgate = false,
+ ) => {
+ pendingTOTPSessions[sessionId] = {
+ client,
+ finish,
+ config,
+ createdAt: Date.now(),
+ sessionId,
+ hostId,
+ ip: host.ip,
+ port: host.port || 22,
+ username: host.username,
+ userId,
+ prompts,
+ totpPromptIndex: promptIndex,
+ resolvedPassword,
+ totpAttempts: 0,
+ containerRuntime,
+ ...(isWarpgate ? { isWarpgate: true } : {}),
+ };
+ };
+
client.on(
"keyboard-interactive",
(
name: string,
instructions: string,
- instructionsLang: string,
+ _instructionsLang: string,
prompts: Array<{ prompt: string; echo: boolean }>,
finish: (responses: string[]) => void,
) => {
- const promptTexts = prompts.map((p) => p.prompt);
+ const decision = ssh.classifyKeyboardInteractive(
+ { name, instructions, prompts },
+ connectTarget,
+ );
+ const autoFinish = () =>
+ finish(ssh.autoResponses(prompts, resolvedPassword));
- const warpgatePattern = /warpgate\s+authentication/i;
- const isWarpgate =
- warpgatePattern.test(name) ||
- warpgatePattern.test(instructions) ||
- promptTexts.some((p) => warpgatePattern.test(p));
-
- if (isWarpgate) {
- const fullText = `${name}\n${instructions}\n${promptTexts.join("\n")}`;
- const urlMatch = fullText.match(/https?:\/\/[^\s\n]+/i);
- const keyMatch = fullText.match(
- /security key[:\s]+([a-z0-9](?:\s+[a-z0-9]){3}|[a-z0-9]{4})/i,
- );
-
- if (urlMatch) {
- if (responseSent) return;
- responseSent = true;
-
- pendingTOTPSessions[sessionId] = {
- client,
- finish,
- config,
- createdAt: Date.now(),
- sessionId,
- hostId,
- ip: host.ip,
- port: host.port || 22,
- username: host.username,
- userId,
- prompts,
- totpPromptIndex: -1,
- resolvedPassword: resolvedCredentials.password,
- totpAttempts: 0,
- isWarpgate: true,
- containerRuntime,
- };
-
- connectionLogs.push(
- createConnectionLog(
- "info",
- "docker_auth",
- "Warpgate authentication required",
- ),
- );
-
- res.json({
- requires_warpgate: true,
- sessionId,
- url: urlMatch[0],
- securityKey: keyMatch ? keyMatch[1] : "N/A",
- connectionLogs,
- });
- return;
- }
+ if (decision.kind === "auto") {
+ finish(decision.responses);
+ return;
}
- const totpPromptIndex = prompts.findIndex((p) =>
- /verification code|verification_code|token|otp|2fa|authenticator|google.*auth/i.test(
- p.prompt,
- ),
- );
-
- if (totpPromptIndex !== -1) {
- if (responseSent) {
- const responses = prompts.map((p) => {
- if (
- /password/i.test(p.prompt) &&
- resolvedCredentials.password
- ) {
- return resolvedCredentials.password;
- }
- return "";
- });
- finish(responses);
- return;
- }
+ if (decision.kind === "warpgate") {
+ if (responseSent) return;
responseSent = true;
-
- if (pendingTOTPSessions[sessionId]) {
- const responses = prompts.map((p) => {
- if (
- /password/i.test(p.prompt) &&
- resolvedCredentials.password
- ) {
- return resolvedCredentials.password;
- }
- return "";
- });
- finish(responses);
- return;
- }
-
- pendingTOTPSessions[sessionId] = {
- client,
- finish,
- config,
- createdAt: Date.now(),
- sessionId,
- hostId,
- ip: host.ip,
- port: host.port || 22,
- username: host.username,
- userId,
- prompts,
- totpPromptIndex,
- resolvedPassword: resolvedCredentials.password,
- totpAttempts: 0,
- containerRuntime,
- };
-
+ parkForAnswer(finish, prompts, -1, true);
connectionLogs.push(
createConnectionLog(
"info",
"docker_auth",
- "TOTP verification required",
+ "Warpgate authentication required",
),
);
+ res.json({
+ requires_warpgate: true,
+ sessionId,
+ url: decision.url,
+ securityKey: decision.securityKey,
+ connectionLogs,
+ });
+ return;
+ }
+ const promptText = prompts[decision.promptIndex].prompt;
+ const isPasswordPrompt = /password/i.test(promptText);
+
+ if (
+ decision.kind === "input" &&
+ !decision.isPush &&
+ !isPasswordPrompt
+ ) {
+ autoFinish();
+ return;
+ }
+
+ if (decision.kind === "input" && isPasswordPrompt && credentialless) {
+ if (responseSent) return;
+ responseSent = true;
+ client.end();
+ res.json({ status: "auth_required", reason: "no_keyboard" });
+ return;
+ }
+
+ if (responseSent || pendingTOTPSessions[sessionId]) {
+ autoFinish();
+ return;
+ }
+ responseSent = true;
+ parkForAnswer(finish, prompts, decision.promptIndex);
+
+ if (decision.kind === "input" && isPasswordPrompt) {
res.json({
requires_totp: true,
sessionId,
- prompt: prompts[totpPromptIndex].prompt,
- connectionLogs,
+ prompt: promptText,
+ isPassword: true,
});
- } else {
- const passwordPromptIndex = prompts.findIndex((p) =>
- /password/i.test(p.prompt),
- );
-
- if (resolvedCredentials.authType === "warpgate") {
- finish(prompts.map(() => ""));
- return;
- }
-
- if (
- (resolvedCredentials.authType === "none" ||
- resolvedCredentials.authType === "tailscale") &&
- passwordPromptIndex !== -1
- ) {
- if (responseSent) return;
- responseSent = true;
- client.end();
- res.json({
- status: "auth_required",
- reason: "no_keyboard",
- });
- return;
- }
-
- const hasStoredPassword =
- resolvedCredentials.password &&
- resolvedCredentials.authType !== "none";
-
- if (!hasStoredPassword && passwordPromptIndex !== -1) {
- if (responseSent) {
- const responses = prompts.map((p) => {
- if (
- /password/i.test(p.prompt) &&
- resolvedCredentials.password
- ) {
- return resolvedCredentials.password;
- }
- return "";
- });
- finish(responses);
- return;
- }
- responseSent = true;
-
- if (pendingTOTPSessions[sessionId]) {
- const responses = prompts.map((p) => {
- if (
- /password/i.test(p.prompt) &&
- resolvedCredentials.password
- ) {
- return resolvedCredentials.password;
- }
- return "";
- });
- finish(responses);
- return;
- }
-
- pendingTOTPSessions[sessionId] = {
- client,
- finish,
- config,
- createdAt: Date.now(),
- sessionId,
- hostId,
- ip: host.ip,
- port: host.port || 22,
- username: host.username,
- userId,
- prompts,
- totpPromptIndex: passwordPromptIndex,
- resolvedPassword: resolvedCredentials.password,
- totpAttempts: 0,
- containerRuntime,
- };
-
- res.json({
- requires_totp: true,
- sessionId,
- prompt: prompts[passwordPromptIndex].prompt,
- isPassword: true,
- });
- return;
- }
-
- const responses = prompts.map((p) => {
- if (/password/i.test(p.prompt) && resolvedCredentials.password) {
- return resolvedCredentials.password;
- }
- return "";
- });
- finish(responses);
+ return;
}
- },
- );
- const proxyConfig: SOCKS5Config | null =
- useSocks5 &&
- (socks5Host ||
- (socks5ProxyChain && (socks5ProxyChain as ProxyNode[]).length > 0))
- ? {
- useSocks5,
- socks5Host,
- socks5Port,
- socks5Username,
- socks5Password,
- socks5ProxyChain: socks5ProxyChain as ProxyNode[],
- }
- : null;
-
- const hasJumpHosts = host.jumpHosts && host.jumpHosts.length > 0;
-
- if (hasJumpHosts) {
- try {
- if (proxyConfig) {
- connectionLogs.push(
- createConnectionLog(
- "info",
- "proxy",
- "Connecting via proxy + jump hosts",
- ),
- );
- }
connectionLogs.push(
createConnectionLog(
"info",
- "jump",
- `Connecting via ${host.jumpHosts!.length} jump host(s)`,
+ "docker_auth",
+ "TOTP verification required",
),
);
- const jumpClient = await createJumpHostChain(
- host.jumpHosts as Array<{ hostId: number }>,
- userId,
- );
-
- if (!jumpClient) {
- connectionLogs.push(
- createConnectionLog(
- "error",
- "jump",
- "Failed to establish jump host chain",
- ),
- );
- return res.status(500).json({
- error: "Failed to establish jump host chain",
- connectionLogs,
- });
- }
-
- jumpClient.forwardOut(
- "127.0.0.1",
- 0,
- host.ip,
- host.port || 22,
- (err, stream) => {
- if (err) {
- sshLogger.error("Failed to forward through jump host", err, {
- operation: "docker_jump_forward",
- sessionId,
- hostId,
- });
- connectionLogs.push(
- createConnectionLog(
- "error",
- "jump",
- `Failed to forward through jump host: ${err.message}`,
- ),
- );
- jumpClient.end();
- if (!responseSent) {
- responseSent = true;
- return res.status(500).json({
- error:
- "Failed to forward through jump host: " + err.message,
- connectionLogs,
- });
- }
- return;
- }
-
- config.sock = stream;
- client.connect(config);
- },
- );
- } catch (jumpError) {
- sshLogger.error("Jump host connection failed", jumpError, {
- operation: "docker_jump_connect",
+ res.json({
+ requires_totp: true,
sessionId,
- hostId,
+ prompt: promptText,
+ connectionLogs,
});
- connectionLogs.push(
- createConnectionLog(
- "error",
- "jump",
- `Jump host connection failed: ${getErrorMessage(jumpError)}`,
- ),
- );
- if (!responseSent) {
- responseSent = true;
- return res.status(500).json({
- error:
- "Jump host connection failed: " + getErrorMessage(jumpError),
- connectionLogs,
- });
- }
- return;
- }
- } else if (proxyConfig) {
+ },
+ );
+
+ if (host.jumpHosts && host.jumpHosts.length > 0) {
+ connectionLogs.push(
+ createConnectionLog(
+ "info",
+ "jump",
+ `Connecting via ${host.jumpHosts.length} jump host(s)`,
+ ),
+ );
+ } else if (useSocks5) {
connectionLogs.push(
createConnectionLog("info", "proxy", "Connecting via proxy"),
);
- try {
- const proxySocket = await createSocks5Connection(
- host.ip,
- host.port || 22,
- proxyConfig,
- );
- if (proxySocket) {
- config.sock = proxySocket;
- }
- client.connect(config);
- } catch (proxyError) {
- sshLogger.error("Proxy connection failed", proxyError, {
- operation: "docker_proxy_connect",
- sessionId,
- hostId,
- });
- connectionLogs.push(
- createConnectionLog(
- "error",
- "proxy",
- `Proxy connection failed: ${getErrorMessage(proxyError)}`,
- ),
- );
- if (!responseSent) {
- responseSent = true;
- return res.status(500).json({
- error: "Proxy connection failed: " + getErrorMessage(proxyError),
- connectionLogs,
- });
- }
- return;
- }
- } else {
- await resolveSshConnectConfigHost(config);
- client.connect(config);
}
+
+ try {
+ const transport = await ssh.openTransport(connectTarget, config);
+ if (transport.jumpClient) {
+ const jumpClient = transport.jumpClient as SSHClient;
+ client.on("close", () => jumpClient.end());
+ }
+ } catch (transportError) {
+ sshLogger.error("Docker SSH transport failed", transportError, {
+ operation: "docker_transport",
+ sessionId,
+ hostId,
+ });
+ connectionLogs.push(
+ createConnectionLog(
+ "error",
+ host.jumpHosts && host.jumpHosts.length > 0 ? "jump" : "proxy",
+ getErrorMessage(transportError),
+ ),
+ );
+ if (!responseSent) {
+ responseSent = true;
+ return res.status(500).json({
+ error: getErrorMessage(transportError),
+ connectionLogs,
+ });
+ }
+ return;
+ }
+
+ client.connect(config);
} catch (error) {
sshLogger.error("Docker SSH connection error", error, {
operation: "docker_connect",
diff --git a/plugins/docker/src/backend/ssh.ts b/plugins/docker/src/backend/ssh.ts
new file mode 100644
index 000000000..b7a221543
--- /dev/null
+++ b/plugins/docker/src/backend/ssh.ts
@@ -0,0 +1,36 @@
+import type { Client } from "ssh2";
+import type {
+ PluginSsh,
+ PluginSshConnection,
+ PluginSshConnectOptions,
+ PluginSshHost,
+} from "@termix/plugin-sdk/backend";
+
+let current: PluginSsh | null = null;
+
+/** Set in activate, cleared on deactivate. */
+export function setPluginSsh(ssh: PluginSsh | null): void {
+ current = ssh;
+}
+
+export function pluginSsh(): PluginSsh {
+ if (!current) throw new Error("The plugin is not active");
+ return current;
+}
+
+/** withConnection with ssh2's Client type filled in. */
+export function withSshConnection(
+ host: number | PluginSshHost,
+ options: PluginSshConnectOptions & { pool: string },
+ fn: (client: Client) => Promise,
+): Promise {
+ return pluginSsh().withConnection(host, options, fn);
+}
+
+/** connect with ssh2's Client type filled in. */
+export function connectSsh(
+ host: number | PluginSshHost,
+ options?: PluginSshConnectOptions,
+): Promise> {
+ return pluginSsh().connect(host, options);
+}
diff --git a/plugins/fleets/src/backend/index.ts b/plugins/fleets/src/backend/index.ts
index 9df692456..7a86375e0 100644
--- a/plugins/fleets/src/backend/index.ts
+++ b/plugins/fleets/src/backend/index.ts
@@ -1,7 +1,10 @@
import type { PluginContext } from "@termix/plugin-sdk/backend";
+import { setPluginSsh } from "./ssh.js";
import { startFleetsService, stopFleetsService } from "./routes.js";
export async function activate(ctx: PluginContext) {
+ setPluginSsh(ctx.ssh);
+ ctx.disposables.add(() => setPluginSsh(null));
startFleetsService(ctx.http.router());
ctx.log.info("Fleets routes mounted at /plugin-api/fleets");
}
diff --git a/plugins/fleets/src/backend/routes.ts b/plugins/fleets/src/backend/routes.ts
index 93d312fda..c130a3f14 100644
--- a/plugins/fleets/src/backend/routes.ts
+++ b/plugins/fleets/src/backend/routes.ts
@@ -26,11 +26,7 @@ import {
createCurrentUserRepository,
} from "../../../../src/backend/database/repositories/factory.js";
import { resolveHostById } from "../../../../src/backend/hosts/host-resolver.js";
-import {
- getFleetPoolKey,
- createFleetSshFactory,
-} from "../../../../src/backend/hosts/ssh-client-factory.js";
-import { withConnection } from "../../../../src/backend/hosts/ssh-connection-pool.js";
+import { withSshConnection } from "./ssh.js";
import { execCommand } from "../../../../src/backend/hosts/metrics-shared/common-utils.js";
import { detectPlatform } from "../../../../src/backend/hosts/metrics-shared/platform.js";
import {
@@ -915,9 +911,9 @@ router.post(
inputValues && typeof inputValues === "object" ? inputValues : {},
);
- const { stdout, stderr, code } = await withConnection(
- getFleetPoolKey(fullHost),
- createFleetSshFactory(fullHost),
+ const { stdout, stderr, code } = await withSshConnection(
+ fullHost as never,
+ { pool: "fleet", purpose: "fleet" },
(client) => execCommand(client, resolvedCommand, 60000),
);
@@ -1017,9 +1013,9 @@ router.post(
return { success: false, error: "Host not found" };
}
- await withConnection(
- getFleetPoolKey(fullHost),
- createFleetSshFactory(fullHost),
+ await withSshConnection(
+ fullHost as never,
+ { pool: "fleet", purpose: "fleet" },
async (client) => {
const sftp = await getSftp(client);
await sftpWriteFile(sftp, remotePath, file.buffer);
@@ -1112,9 +1108,9 @@ router.post(
return { success: false, error: "Host not found" };
}
- const data = await withConnection(
- getFleetPoolKey(fullHost),
- createFleetSshFactory(fullHost),
+ const data = await withSshConnection(
+ fullHost as never,
+ { pool: "fleet", purpose: "fleet" },
async (client) => {
const sftp = await getSftp(client);
return sftpReadFile(sftp, remotePath);
@@ -1305,9 +1301,9 @@ router.post(
return { success: false, error: "Host not found" };
}
- const record = await withConnection(
- getFleetPoolKey(fullHost),
- createFleetSshFactory(fullHost),
+ const record = await withSshConnection(
+ fullHost as never,
+ { pool: "fleet", purpose: "fleet" },
async (client) => {
const platform = await detectPlatform(client);
const { stdout } = await execCommand(
@@ -1418,9 +1414,9 @@ router.post(
return { success: false, error: "Host not found" };
}
- return withConnection(
- getFleetPoolKey(fullHost),
- createFleetSshFactory(fullHost),
+ return withSshConnection(
+ fullHost as never,
+ { pool: "fleet", purpose: "fleet" },
async (client) => {
const platform = await detectPlatform(client);
// "remove" has no PackageAction counterpart in buildPackageActionCommand
diff --git a/plugins/fleets/src/backend/ssh.ts b/plugins/fleets/src/backend/ssh.ts
new file mode 100644
index 000000000..b7a221543
--- /dev/null
+++ b/plugins/fleets/src/backend/ssh.ts
@@ -0,0 +1,36 @@
+import type { Client } from "ssh2";
+import type {
+ PluginSsh,
+ PluginSshConnection,
+ PluginSshConnectOptions,
+ PluginSshHost,
+} from "@termix/plugin-sdk/backend";
+
+let current: PluginSsh | null = null;
+
+/** Set in activate, cleared on deactivate. */
+export function setPluginSsh(ssh: PluginSsh | null): void {
+ current = ssh;
+}
+
+export function pluginSsh(): PluginSsh {
+ if (!current) throw new Error("The plugin is not active");
+ return current;
+}
+
+/** withConnection with ssh2's Client type filled in. */
+export function withSshConnection(
+ host: number | PluginSshHost,
+ options: PluginSshConnectOptions & { pool: string },
+ fn: (client: Client) => Promise,
+): Promise {
+ return pluginSsh().withConnection(host, options, fn);
+}
+
+/** connect with ssh2's Client type filled in. */
+export function connectSsh(
+ host: number | PluginSshHost,
+ options?: PluginSshConnectOptions,
+): Promise> {
+ return pluginSsh().connect(host, options);
+}
diff --git a/plugins/fleets/tests/backend/routes.test.ts b/plugins/fleets/tests/backend/routes.test.ts
index 0cdb02f66..6d4e5fa29 100644
--- a/plugins/fleets/tests/backend/routes.test.ts
+++ b/plugins/fleets/tests/backend/routes.test.ts
@@ -60,15 +60,10 @@ vi.mock("../../../../src/backend/hosts/host-resolver.js", () => ({
resolveHostById: async (hostId: number) => state.hosts.get(hostId) ?? null,
}));
-vi.mock("../../../../src/backend/hosts/ssh-client-factory.js", () => ({
- getFleetPoolKey: () => "pool-key",
- createFleetSshFactory: () => async () => ({}),
-}));
-
-vi.mock("../../../../src/backend/hosts/ssh-connection-pool.js", () => ({
- withConnection: async (
- _key: string,
- _factory: unknown,
+vi.mock("../../src/backend/ssh.js", () => ({
+ withSshConnection: async (
+ _host: unknown,
+ _options: unknown,
fn: (client: unknown) => unknown,
) => fn({}),
}));
diff --git a/plugins/host-metrics/src/backend/helpers.ts b/plugins/host-metrics/src/backend/helpers.ts
index 8dc9bb4da..d6020bed8 100644
--- a/plugins/host-metrics/src/backend/helpers.ts
+++ b/plugins/host-metrics/src/backend/helpers.ts
@@ -1,5 +1,5 @@
import type { Client } from "ssh2";
-import { usesIssuedCertificate } from "../../../../src/backend/hosts/issued-certificate-auth.js";
+import { pluginSsh } from "./ssh.js";
export type StatsCapableHost = {
connectionType?: string;
@@ -14,9 +14,7 @@ export type TcpPingStatsConfig = {
export function supportsMetrics(host: StatsCapableHost): boolean {
const connectionType = host.connectionType || "ssh";
if (connectionType !== "ssh") return false;
- if (host.authType === "none" || usesIssuedCertificate(host.authType))
- return false;
- return true;
+ return pluginSsh().supportsBackground(host.authType || "none");
}
export function isTcpPingEnabled(statsConfig: TcpPingStatsConfig): boolean {
diff --git a/plugins/host-metrics/src/backend/index.ts b/plugins/host-metrics/src/backend/index.ts
index 7c3dff92d..c177a3481 100644
--- a/plugins/host-metrics/src/backend/index.ts
+++ b/plugins/host-metrics/src/backend/index.ts
@@ -1,4 +1,5 @@
import type { PluginContext } from "@termix/plugin-sdk/backend";
+import { setPluginSsh } from "./ssh.js";
import {
onHostDeleted,
onHostLogin,
@@ -8,6 +9,8 @@ import {
} from "./routes.js";
export async function activate(ctx: PluginContext) {
+ setPluginSsh(ctx.ssh);
+ ctx.disposables.add(() => setPluginSsh(null));
await startHostMetricsService(ctx.http.router());
// Core used to POST these to this plugin's own port with an internal auth
diff --git a/plugins/host-metrics/src/backend/routes.ts b/plugins/host-metrics/src/backend/routes.ts
index 8eec792ef..d98945403 100644
--- a/plugins/host-metrics/src/backend/routes.ts
+++ b/plugins/host-metrics/src/backend/routes.ts
@@ -1,13 +1,7 @@
import { getErrorMessage } from "../../../../src/backend/utils/error-message.js";
-import { usesIssuedCertificate } from "../../../../src/backend/hosts/issued-certificate-auth.js";
import express, { type Router } from "express";
import net from "net";
import { Client, type ConnectConfig } from "ssh2";
-import { SSH_ALGORITHMS } from "../../../../src/backend/utils/ssh-algorithms.js";
-import {
- pickResolvedPassword,
- pickResolvedUsername,
-} from "../../../../src/backend/hosts/credential-username.js";
import {
getCurrentSettingValue,
createCurrentHostMetricsHistoryRepository,
@@ -47,16 +41,7 @@ import { collectPortsMetrics } from "./widgets/ports-collector.js";
import { collectFirewallMetrics } from "./widgets/firewall-collector.js";
import { collectTemperatureMetrics } from "./widgets/temperature-collector.js";
import { collectGpuMetrics, type GpuMetrics } from "./widgets/gpu-collector.js";
-import {
- createSocks5Connection,
- type SOCKS5Config,
-} from "../../../../src/backend/utils/socks5-helper.js";
-import { preparePrivateKeyForSSH2 } from "../../../../src/backend/utils/ssh-key-utils.js";
-import { SSHHostKeyVerifier } from "../../../../src/backend/hosts/host-key-verifier.js";
-import {
- connectionPool,
- withConnection,
-} from "../../../../src/backend/hosts/ssh-connection-pool.js";
+import { connectionPool } from "../../../../src/backend/hosts/ssh-connection-pool.js";
import { registerHostMetricsSettingsRoutes } from "./settings-routes.js";
import { registerHostMetricsViewerRoutes } from "./viewer-routes.js";
import { registerHostMetricsPreferencesRoutes } from "./preferences-routes.js";
@@ -75,10 +60,10 @@ import {
} from "./automation-bridge.js";
import { notifyAutomationInternalEvent } from "../../../../src/backend/hosts/automation-events.js";
import { registerManagerRoutes } from "./managers/index.js";
-import { resolveSshConnectConfigHost } from "../../../../src/backend/hosts/ssh-dns.js";
import { AccessDeniedError } from "./managers/route-helpers.js";
import type { ManagerHost } from "./managers/types.js";
-import { createJumpHostChain } from "../../../../src/backend/hosts/jump-host-chain.js";
+import type { PluginSshHost } from "@termix/plugin-sdk/backend";
+import { pluginSsh, withSshConnection as withPooledSsh } from "./ssh.js";
import { resolveHostById } from "../../../../src/backend/hosts/host-resolver.js";
import {
isTcpPingEnabled,
@@ -617,10 +602,15 @@ class PollingManager {
let isOnline: boolean;
if (refreshedHost.jumpHosts && refreshedHost.jumpHosts.length > 0) {
- const jumpClient = await createJumpHostChain(
- refreshedHost.jumpHosts,
- userId,
- );
+ let jumpClient: Client | null = null;
+ try {
+ ({ client: jumpClient } = await pluginSsh().jumpChain(
+ refreshedHost.jumpHosts,
+ { forHost: refreshedHost as unknown as PluginSshHost },
+ ));
+ } catch {
+ jumpClient = null;
+ }
isOnline = jumpClient
? await tcpPingThroughJumpHost(
jumpClient,
@@ -1139,176 +1129,38 @@ async function fetchHostById(
}
}
+/**
+ * Resolves through core's host resolver, so shared-host overrides and
+ * external secret references apply here exactly as in the terminal.
+ */
async function resolveHostCredentials(
host: Record,
userId: string,
): Promise {
try {
- const baseHost: Record = {
- id: host.id,
- name: host.name,
- ip: host.ip,
- port: host.port,
- username: host.username,
- folder: host.folder || "",
+ const resolved = (await resolveHostById(
+ host.id as number,
+ userId,
+ )) as unknown as Record | null;
+ if (!resolved) return undefined;
+ const terminalConfig = resolved.terminalConfig as
+ Record | undefined;
+ return {
+ ...resolved,
tags:
- typeof host.tags === "string"
- ? host.tags
- ? host.tags.split(",").filter(Boolean)
+ typeof resolved.tags === "string"
+ ? resolved.tags
+ ? resolved.tags.split(",").filter(Boolean)
: []
- : [],
- pin: !!host.pin,
- authType: host.authType,
- enableTerminal: !!host.enableTerminal,
- enableTunnel: !!host.enableTunnel,
- enableFileManager: !!host.enableFileManager,
- defaultPath: host.defaultPath || "/",
- tunnelConnections: host.tunnelConnections
- ? JSON.parse(host.tunnelConnections as string)
- : [],
- jumpHosts: host.jumpHosts ? JSON.parse(host.jumpHosts as string) : [],
- statsConfig: host.statsConfig || undefined,
- sudoPassword: (() => {
- const top = host.sudoPassword as string | null | undefined;
- if (top) return top;
- try {
- const tc =
- typeof host.terminalConfig === "string"
- ? JSON.parse(host.terminalConfig as string)
- : host.terminalConfig;
- return (tc?.sudoPassword as string) || undefined;
- } catch {
- return undefined;
- }
- })(),
- createdAt: host.createdAt,
- updatedAt: host.updatedAt,
- userId: host.userId,
- useSocks5: !!host.useSocks5,
- socks5Host: host.socks5Host || undefined,
- socks5Port: host.socks5Port || undefined,
- socks5Username: host.socks5Username || undefined,
- socks5Password: host.socks5Password || undefined,
- socks5ProxyChain: host.socks5ProxyChain
- ? JSON.parse(host.socks5ProxyChain as string)
- : undefined,
+ : (resolved.tags ?? []),
+ sudoPassword:
+ (resolved.sudoPassword as string | undefined) ||
+ (terminalConfig?.sudoPassword as string | undefined) ||
+ undefined,
connectionType:
- (host.connectionType as SSHHostWithCredentials["connectionType"]) ||
+ (resolved.connectionType as SSHHostWithCredentials["connectionType"]) ||
"ssh",
- rdpPort: (host.rdpPort as number | undefined) ?? undefined,
- vncPort: (host.vncPort as number | undefined) ?? undefined,
- telnetPort: (host.telnetPort as number | undefined) ?? undefined,
- };
-
- if (host.credentialId) {
- try {
- const ownerId = host.userId;
- const isSharedHost = userId !== ownerId;
-
- if (isSharedHost) {
- const { SharedHostSecretsManager } =
- await import("../../../../src/backend/utils/shared-host-secrets-manager.js");
- const sharedCred =
- await SharedHostSecretsManager.getInstance().getSecretForUser(
- host.id as number,
- userId,
- "ssh",
- );
-
- if (sharedCred) {
- baseHost.credentialId = host.credentialId;
- baseHost.authType = sharedCred.authType;
-
- baseHost.username = pickResolvedUsername(
- host.username,
- sharedCred.username,
- host.overrideCredentialUsername,
- );
-
- if (sharedCred.password) {
- baseHost.password = sharedCred.password;
- }
- if (sharedCred.key) {
- baseHost.key = sharedCred.key;
- }
- if (sharedCred.keyPassword) {
- baseHost.keyPassword = sharedCred.keyPassword;
- }
- if (sharedCred.keyType) {
- baseHost.keyType = sharedCred.keyType;
- }
- }
- } else {
- const credential =
- await createCurrentHostResolutionRepository().findCredentialByIdForUser(
- host.credentialId as number,
- userId,
- );
-
- if (credential) {
- baseHost.credentialId = credential.id;
- baseHost.authType =
- credential.authType ||
- (credential.password
- ? "password"
- : credential.key ||
- (credential as Record).privateKey
- ? "key"
- : "none");
-
- baseHost.username = pickResolvedUsername(
- host.username,
- credential.username,
- host.overrideCredentialUsername,
- );
-
- baseHost.password = pickResolvedPassword(
- host.password,
- credential.password,
- );
- if (
- credential.key ||
- (credential as Record).privateKey
- ) {
- baseHost.key =
- credential.key ||
- ((credential as Record).privateKey as string);
- }
- if (credential.keyPassword) {
- baseHost.keyPassword = credential.keyPassword;
- }
- if (credential.keyType) {
- baseHost.keyType = credential.keyType;
- }
- } else {
- addLegacyCredentials(baseHost, host);
- if (baseHost.authType === "credential") {
- baseHost.authType = baseHost.password
- ? "password"
- : baseHost.key
- ? "key"
- : "none";
- }
- }
- }
- } catch (error) {
- statsLogger.warn(
- `Failed to resolve credential ${host.credentialId} for host ${host.id}: ${getErrorMessage(error)}`,
- );
- addLegacyCredentials(baseHost, host);
- if (baseHost.authType === "credential") {
- baseHost.authType = baseHost.password
- ? "password"
- : baseHost.key
- ? "key"
- : "none";
- }
- }
- } else {
- addLegacyCredentials(baseHost, host);
- }
-
- return baseHost as unknown as SSHHostWithCredentials;
+ } as unknown as SSHHostWithCredentials;
} catch (error) {
statsLogger.error(
`Failed to resolve host credentials for host ${host.id}: ${getErrorMessage(error)}`,
@@ -1317,340 +1169,21 @@ async function resolveHostCredentials(
}
}
-function addLegacyCredentials(
- baseHost: Record,
- host: Record,
-): void {
- baseHost.password = host.password || null;
- baseHost.key = host.key || null;
- baseHost.keyPassword = host.keyPassword || null;
- baseHost.keyType = host.keyType;
-}
-
-async function buildSshConfig(
- host: SSHHostWithCredentials,
-): Promise {
- const base: ConnectConfig = {
- host: host.ip?.replace(/^\[|\]$/g, "") || host.ip,
- port: host.port,
- username: host.username,
- tryKeyboard: true,
- keepaliveInterval: 30000,
- keepaliveCountMax: 3,
- readyTimeout: 60000,
- tcpKeepAlive: true,
- tcpKeepAliveInitialDelay: 30000,
- hostVerifier: await SSHHostKeyVerifier.createHostVerifier(
- host.id,
- host.ip,
- host.port,
- null,
- host.userId || "",
- false,
- ),
- env: {
- TERM: "xterm-256color",
- LANG: "en_US.UTF-8",
- LC_ALL: "en_US.UTF-8",
- LC_CTYPE: "en_US.UTF-8",
- LC_MESSAGES: "en_US.UTF-8",
- LC_MONETARY: "en_US.UTF-8",
- LC_NUMERIC: "en_US.UTF-8",
- LC_TIME: "en_US.UTF-8",
- LC_COLLATE: "en_US.UTF-8",
- COLORTERM: "truecolor",
- },
- algorithms: {
- kex: [
- "curve25519-sha256",
- "curve25519-sha256@libssh.org",
- "ecdh-sha2-nistp521",
- "ecdh-sha2-nistp384",
- "ecdh-sha2-nistp256",
- "diffie-hellman-group-exchange-sha256",
- "diffie-hellman-group14-sha256",
- "diffie-hellman-group14-sha1",
- "diffie-hellman-group-exchange-sha1",
- "diffie-hellman-group1-sha1",
- ],
- serverHostKey: [
- "ssh-ed25519",
- "ecdsa-sha2-nistp521",
- "ecdsa-sha2-nistp384",
- "ecdsa-sha2-nistp256",
- "rsa-sha2-512",
- "rsa-sha2-256",
- "ssh-rsa",
- "ssh-dss",
- ],
- cipher: SSH_ALGORITHMS.cipher,
- hmac: [
- "hmac-sha2-512-etm@openssh.com",
- "hmac-sha2-256-etm@openssh.com",
- "hmac-sha2-512",
- "hmac-sha2-256",
- "hmac-sha1",
- "hmac-md5",
- ],
- compress: ["none", "zlib@openssh.com", "zlib"],
- },
- } as ConnectConfig;
-
- if (host.authType === "password") {
- if (!host.password) {
- throw new Error(`No password available for host ${host.ip}`);
- }
- base.password = host.password;
- } else if (host.authType === "key") {
- if (!host.key) {
- throw new Error(`No SSH key available for host ${host.ip}`);
- }
-
- try {
- (base as Record).privateKey = preparePrivateKeyForSSH2(
- host.key,
- host.keyPassword,
- );
-
- if (host.keyPassword) {
- (base as Record).passphrase = host.keyPassword;
- }
- } catch (keyError) {
- statsLogger.error(
- `SSH key format error for host ${host.ip}: ${getErrorMessage(keyError)}`,
- );
- throw new Error(`Invalid SSH key format for host ${host.ip}`, {
- cause: keyError,
- });
- }
- } else if (
- host.authType === "none" ||
- host.authType === "tailscale" ||
- host.authType === "warpgate"
- ) {
- // no credentials needed
- } else if (usesIssuedCertificate(host.authType)) {
- // cert auth setup happens in createSshFactory (needs client instance)
- } else if (host.authType === "vault") {
- // cert auth setup happens in createSshFactory (needs client instance)
- } else if (host.authType === "credential") {
- if (host.password) {
- base.password = host.password;
- } else if (host.key) {
- const cleanKey = host.key
- .trim()
- .replace(/\r\n/g, "\n")
- .replace(/\r/g, "\n");
- (base as Record).privateKey = Buffer.from(
- cleanKey,
- "utf8",
- );
- if (host.keyPassword) {
- (base as Record).passphrase = host.keyPassword;
- }
- } else {
- throw new Error(`Credential for host ${host.ip} could not be resolved`);
- }
- } else {
- throw new Error(
- `Unsupported authentication type '${host.authType}' for host ${host.ip}`,
- );
- }
-
- return base;
-}
-
function getPoolKey(host: SSHHostWithCredentials): string {
- const socks5Key = host.useSocks5
- ? `:socks5:${host.socks5Host}:${host.socks5Port}`
- : "";
- return `stats:${host.userId}:${host.ip}:${host.port}:${host.username}${socks5Key}`;
-}
-
-function createSshFactory(host: SSHHostWithCredentials): () => Promise {
- return async () => {
- const config = await buildSshConfig(host);
- const client = new Client();
-
- // Set up OPKSSH cert auth if needed (requires client instance)
- if (usesIssuedCertificate(host.authType) && host.userId) {
- const { getOPKSSHToken } =
- await import("../../../../src/backend/hosts/opkssh-auth.js");
- const token = await getOPKSSHToken(host.userId, host.id);
- if (!token) {
- throw new Error(
- "OPKSSH authentication required. Please open a Terminal connection first.",
- );
- }
- const { setupOPKSSHCertAuth } =
- await import("../../../../src/backend/hosts/opkssh-cert-auth.js");
- await setupOPKSSHCertAuth(config, client, token, host.username);
- } else if (host.authType === "vault") {
- const { setupVaultSshSignerAuth } =
- await import("../../../../src/backend/hosts/vault-ssh-connect.js");
- await setupVaultSshSignerAuth(config, client, host);
- }
-
- const proxyConfig: SOCKS5Config | null =
- host.useSocks5 &&
- (host.socks5Host ||
- (host.socks5ProxyChain && host.socks5ProxyChain.length > 0))
- ? {
- useSocks5: host.useSocks5,
- socks5Host: host.socks5Host,
- socks5Port: host.socks5Port,
- socks5Username: host.socks5Username,
- socks5Password: host.socks5Password,
- socks5ProxyChain: host.socks5ProxyChain,
- }
- : null;
-
- const hasJumpHosts =
- host.jumpHosts && host.jumpHosts.length > 0 && host.userId;
-
- let jumpClient: Client | null = null;
- if (hasJumpHosts) {
- jumpClient = await createJumpHostChain(host.jumpHosts!, host.userId!);
-
- if (!jumpClient) {
- throw new Error("Failed to establish jump host chain");
- }
- } else if (proxyConfig) {
- try {
- const proxySocket = await createSocks5Connection(
- host.ip,
- host.port,
- proxyConfig,
- );
- if (proxySocket) {
- config.sock = proxySocket;
- }
- } catch (proxyError) {
- throw new Error(
- "Proxy connection failed: " + getErrorMessage(proxyError),
- { cause: proxyError },
- );
- }
- }
-
- return new Promise((resolve, reject) => {
- const timeout = setTimeout(() => {
- client.end();
- jumpClient?.end();
- reject(new Error("SSH connection timeout"));
- }, 30000);
-
- client.on("ready", () => {
- clearTimeout(timeout);
- resolve(client);
- });
-
- client.on("close", () => {
- jumpClient?.end();
- });
-
- client.on("error", (err) => {
- clearTimeout(timeout);
- jumpClient?.end();
- reject(err);
- });
-
- client.on(
- "keyboard-interactive",
- (
- _name: string,
- _instructions: string,
- _instructionsLang: string,
- prompts: Array<{ prompt: string; echo: boolean }>,
- finish: (responses: string[]) => void,
- ) => {
- const totpPromptIndex = prompts.findIndex((p) =>
- /verification code|verification_code|token|otp|2fa|authenticator|google.*auth/i.test(
- p.prompt,
- ),
- );
-
- if (totpPromptIndex !== -1) {
- const sessionId = `totp-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`;
-
- pendingTOTPSessions[sessionId] = {
- client,
- finish,
- config,
- createdAt: Date.now(),
- sessionId,
- hostId: host.id,
- userId: host.userId!,
- prompts: prompts.map((p) => ({
- prompt: p.prompt,
- echo: p.echo ?? false,
- })),
- totpPromptIndex,
- resolvedPassword: host.password,
- totpAttempts: 0,
- };
-
- return;
- } else if (host.password) {
- const responses = prompts.map((p) => {
- if (/password/i.test(p.prompt)) {
- return host.password || "";
- }
- return "";
- });
- finish(responses);
- } else {
- finish(prompts.map(() => ""));
- }
- },
- );
-
- if (jumpClient) {
- jumpClient.forwardOut(
- "127.0.0.1",
- 0,
- host.ip,
- host.port,
- (err, stream) => {
- if (err) {
- clearTimeout(timeout);
- jumpClient!.end();
- reject(
- new Error(
- "Failed to forward through jump host: " + err.message,
- ),
- );
- return;
- }
-
- config.sock = stream;
- client.connect(config);
- },
- );
- } else if (config.sock) {
- client.connect(config);
- } else {
- resolveSshConnectConfigHost(config)
- .then(() => {
- client.connect(config);
- })
- .catch((error) => {
- clearTimeout(timeout);
- reject(error);
- });
- return;
- }
- });
- };
+ return pluginSsh().poolKey("stats", host as unknown as PluginSshHost);
}
async function withSshConnection(
host: SSHHostWithCredentials,
fn: (client: Client) => Promise,
): Promise {
- const key = getPoolKey(host);
- const factory = createSshFactory(host);
- return withConnection(key, factory, fn);
+ // Background polling has nobody to answer a TOTP prompt, so the pooled
+ // connection answers password prompts only and fails fast otherwise.
+ return withPooledSsh(
+ host as unknown as PluginSshHost,
+ { pool: "stats", purpose: "metrics", overrides: { readyTimeout: 60000 } },
+ fn,
+ );
}
const proxmoxPollingManager = new ProxmoxPollingManager(
@@ -2347,34 +1880,30 @@ app.post("/metrics/start/:id", validateHostId, async (req, res) => {
return res.json({ success: true, connectionLogs });
}
- const config = await buildSshConfig(host);
const client = new Client();
-
- if (usesIssuedCertificate(host.authType) && host.userId) {
- const { getOPKSSHToken } =
- await import("../../../../src/backend/hosts/opkssh-auth.js");
- const token = await getOPKSSHToken(host.userId, host.id);
- if (!token) {
- connectionLogs.push(
- createConnectionLog(
- "error",
- "auth",
- "OPKSSH authentication required. Please open a Terminal connection first.",
- ),
- );
+ const ssh = pluginSsh();
+ const prepared = await ssh.prepare(host as unknown as PluginSshHost, {
+ purpose: "metrics",
+ client,
+ log: (level, message) =>
+ connectionLogs.push(createConnectionLog(level, "auth", message)),
+ });
+ const config = prepared.config as ConnectConfig;
+ config.readyTimeout = 60000;
+ if (prepared.outcome.status !== "ready") {
+ const outcome = prepared.outcome;
+ connectionLogs.push(
+ createConnectionLog("error", "auth", outcome.message),
+ );
+ if (outcome.status === "interaction-required") {
return res.status(401).json({
- error: "OPKSSH authentication required",
- requiresOPKSSHAuth: true,
+ error: outcome.message,
+ requiresAuthInteraction: outcome.interaction,
+ ...(outcome.flag ? { [outcome.flag]: true } : {}),
connectionLogs,
});
}
- const { setupOPKSSHCertAuth } =
- await import("../../../../src/backend/hosts/opkssh-cert-auth.js");
- await setupOPKSSHCertAuth(config, client, token, host.username);
- } else if (host.authType === "vault") {
- const { setupVaultSshSignerAuth } =
- await import("../../../../src/backend/hosts/vault-ssh-connect.js");
- await setupVaultSshSignerAuth(config, client, host);
+ return res.status(400).json({ error: outcome.message, connectionLogs });
}
const connectionPromise = new Promise<{
@@ -2396,12 +1925,13 @@ app.post("/metrics/start/:id", validateHostId, async (req, res) => {
client.on(
"keyboard-interactive",
- (name, instructions, instructionsLang, prompts, finish) => {
- const totpPromptIndex = prompts.findIndex((p) =>
- /verification code|verification_code|token|otp|2fa|authenticator|google.*auth/i.test(
- p.prompt,
- ),
+ (name, instructions, _instructionsLang, prompts, finish) => {
+ const decision = ssh.classifyKeyboardInteractive(
+ { name, instructions, prompts },
+ host as unknown as PluginSshHost,
);
+ const totpPromptIndex =
+ decision.kind === "totp" ? decision.promptIndex : -1;
if (totpPromptIndex !== -1) {
const sessionId = `totp-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`;
@@ -2443,13 +1973,7 @@ app.post("/metrics/start/:id", validateHostId, async (req, res) => {
}
return;
} else {
- const responses = prompts.map((p) => {
- if (/password/i.test(p.prompt) && host.password) {
- return host.password;
- }
- return "";
- });
- finish(responses);
+ finish(ssh.autoResponses(prompts, host.password));
}
},
);
@@ -2577,10 +2101,7 @@ app.post("/metrics/start/:id", validateHostId, async (req, res) => {
}
});
- const hasJumpHosts =
- host.jumpHosts && host.jumpHosts.length > 0 && host.userId;
-
- if (hasJumpHosts) {
+ if (host.jumpHosts && host.jumpHosts.length > 0) {
connectionLogs.push(
createConnectionLog(
"info",
@@ -2588,92 +2109,33 @@ app.post("/metrics/start/:id", validateHostId, async (req, res) => {
"Connecting via jump host chain",
),
);
- createJumpHostChain(host.jumpHosts!, host.userId!)
- .then((jumpClient) => {
- jumpClient.forwardOut(
- "127.0.0.1",
- 0,
- host.ip,
- host.port,
- (err, stream) => {
- if (err || !stream) {
- if (!isResolved) {
- isResolved = true;
- clearTimeout(timeout);
- reject(err || new Error("Jump host forward failed"));
- }
- return;
- }
- config.sock = stream;
- delete config.host;
- delete config.port;
- client.connect(config);
- },
- );
- })
- .catch((error) => {
- if (!isResolved) {
- isResolved = true;
- clearTimeout(timeout);
- connectionLogs.push(
- createConnectionLog(
- "error",
- "proxy",
- `Jump host connection failed: ${getErrorMessage(error)}`,
- ),
- );
- reject(error);
- }
- });
- } else if (
- host.useSocks5 &&
- (host.socks5Host ||
- (host.socks5ProxyChain && host.socks5ProxyChain.length > 0))
- ) {
- connectionLogs.push(
- createConnectionLog("info", "proxy", "Connecting via SOCKS5 proxy"),
- );
- createSocks5Connection(host.ip, host.port, {
- useSocks5: host.useSocks5,
- socks5Host: host.socks5Host,
- socks5Port: host.socks5Port,
- socks5Username: host.socks5Username,
- socks5Password: host.socks5Password,
- socks5ProxyChain: host.socks5ProxyChain,
- })
- .then((socks5Socket) => {
- if (socks5Socket) {
- config.sock = socks5Socket;
- }
- client.connect(config);
- })
- .catch((error) => {
- if (!isResolved) {
- isResolved = true;
- clearTimeout(timeout);
- connectionLogs.push(
- createConnectionLog(
- "error",
- "proxy",
- `SOCKS5 proxy connection failed: ${getErrorMessage(error)}`,
- ),
- );
- reject(error);
- }
- });
- } else {
- resolveSshConnectConfigHost(config)
- .then(() => {
- client.connect(config);
- })
- .catch((error) => {
- if (!isResolved) {
- isResolved = true;
- clearTimeout(timeout);
- reject(error);
- }
- });
}
+ ssh
+ .openTransport(
+ host as unknown as PluginSshHost,
+ config as Record,
+ )
+ .then((transport) => {
+ if (transport.jumpClient) {
+ const jumpClient = transport.jumpClient as Client;
+ client.on("close", () => jumpClient.end());
+ }
+ client.connect(config);
+ })
+ .catch((error) => {
+ if (!isResolved) {
+ isResolved = true;
+ clearTimeout(timeout);
+ connectionLogs.push(
+ createConnectionLog(
+ "error",
+ "proxy",
+ `Connection setup failed: ${getErrorMessage(error)}`,
+ ),
+ );
+ reject(error);
+ }
+ });
});
const result = await connectionPromise;
@@ -3093,5 +2555,7 @@ export function shutdown(): void {
}
pollingManager.destroy();
proxmoxPollingManager.destroy();
- connectionPool.destroy();
+ // The pool is core's and shared with tmux and the fleet tools; destroying it
+ // here broke them until a restart. ctx.ssh drops this plugin's pooled
+ // connections on deactivate instead.
}
diff --git a/plugins/host-metrics/src/backend/ssh.ts b/plugins/host-metrics/src/backend/ssh.ts
new file mode 100644
index 000000000..b7a221543
--- /dev/null
+++ b/plugins/host-metrics/src/backend/ssh.ts
@@ -0,0 +1,36 @@
+import type { Client } from "ssh2";
+import type {
+ PluginSsh,
+ PluginSshConnection,
+ PluginSshConnectOptions,
+ PluginSshHost,
+} from "@termix/plugin-sdk/backend";
+
+let current: PluginSsh | null = null;
+
+/** Set in activate, cleared on deactivate. */
+export function setPluginSsh(ssh: PluginSsh | null): void {
+ current = ssh;
+}
+
+export function pluginSsh(): PluginSsh {
+ if (!current) throw new Error("The plugin is not active");
+ return current;
+}
+
+/** withConnection with ssh2's Client type filled in. */
+export function withSshConnection(
+ host: number | PluginSshHost,
+ options: PluginSshConnectOptions & { pool: string },
+ fn: (client: Client) => Promise,
+): Promise {
+ return pluginSsh().withConnection(host, options, fn);
+}
+
+/** connect with ssh2's Client type filled in. */
+export function connectSsh(
+ host: number | PluginSshHost,
+ options?: PluginSshConnectOptions,
+): Promise> {
+ return pluginSsh().connect(host, options);
+}
diff --git a/plugins/host-metrics/tests/backend/helpers.test.ts b/plugins/host-metrics/tests/backend/helpers.test.ts
index a8c1dcf87..c9d7b0365 100644
--- a/plugins/host-metrics/tests/backend/helpers.test.ts
+++ b/plugins/host-metrics/tests/backend/helpers.test.ts
@@ -1,5 +1,5 @@
import type { Client } from "ssh2";
-import { describe, it, expect, vi } from "vitest";
+import { afterAll, beforeAll, describe, it, expect, vi } from "vitest";
import {
supportsMetrics,
isTcpPingEnabled,
@@ -7,8 +7,17 @@ import {
tcpPingThroughJumpHost,
} from "../../src/backend/helpers.js";
import { createConnectionLog } from "../../../../src/backend/hosts/connection-log.js";
+import { createFakeContext } from "@termix/plugin-sdk/testing";
+import { setPluginSsh } from "../../src/backend/ssh.js";
describe("supportsMetrics", () => {
+ beforeAll(() => {
+ setPluginSsh(createFakeContext().ctx.ssh);
+ });
+ afterAll(() => {
+ setPluginSsh(null);
+ });
+
it("supports plain ssh hosts", () => {
expect(
supportsMetrics({ connectionType: "ssh", authType: "password" }),
diff --git a/plugins/proxmox/src/backend/index.ts b/plugins/proxmox/src/backend/index.ts
index 64bba2ea8..48a5e9801 100644
--- a/plugins/proxmox/src/backend/index.ts
+++ b/plugins/proxmox/src/backend/index.ts
@@ -1,7 +1,10 @@
import type { PluginContext } from "@termix/plugin-sdk/backend";
+import { setPluginSsh } from "./ssh.js";
import { startProxmoxService, stopProxmoxService } from "./routes.js";
export async function activate(ctx: PluginContext) {
+ setPluginSsh(ctx.ssh);
+ ctx.disposables.add(() => setPluginSsh(null));
startProxmoxService(ctx.http.router());
ctx.log.info("Proxmox routes mounted at /plugin-api/proxmox");
}
diff --git a/plugins/proxmox/src/backend/routes.ts b/plugins/proxmox/src/backend/routes.ts
index d0331e6d0..dcfe9a61f 100644
--- a/plugins/proxmox/src/backend/routes.ts
+++ b/plugins/proxmox/src/backend/routes.ts
@@ -1,6 +1,6 @@
import { getErrorMessage } from "../../../../src/backend/utils/error-message.js";
import express, { type Router } from "express";
-import { Client as SSHClient } from "ssh2";
+import type { Client as SSHClient } from "ssh2";
import { logger } from "../../../../src/backend/utils/logger.js";
import { DataCrypto } from "../../../../src/backend/utils/data-crypto.js";
import { createCurrentHostRepository } from "../../../../src/backend/database/repositories/factory.js";
@@ -9,9 +9,9 @@ import {
type AuthenticatedRequest,
type SSHHost,
} from "../../../../src/types/index.js";
-import { SSHHostKeyVerifier } from "../../../../src/backend/hosts/host-key-verifier.js";
import { resolveHostById } from "../../../../src/backend/hosts/host-resolver.js";
-import { createJumpHostChain } from "../../../../src/backend/hosts/jump-host-chain.js";
+import type { PluginSshHost } from "@termix/plugin-sdk/backend";
+import { connectSsh } from "./ssh.js";
import { resolveProxmoxImportAuth } from "./proxmox-import-auth.js";
import {
parseProxmoxJumpHosts,
@@ -309,109 +309,15 @@ async function discoverProxmoxGuestsForHost(
const proxmoxCfgRaw = parseJsonObject(host.proxmoxConfig);
const config = parseProxmoxConfig(proxmoxCfgRaw);
- const resolvedCredentials: {
- password?: string;
- sshKey?: string;
- keyPassword?: string;
- authType?: string;
- } = {
- password: host.password,
- sshKey: host.key,
- keyPassword: host.keyPassword,
- authType: host.authType,
- };
-
const hostCredentialId = host.credentialId ?? null;
- const sshConfig: Record = {
- host: host.ip?.replace(/^\[|\]$/g, "") || host.ip,
- port: host.port || 22,
- username: host.username,
- tryKeyboard: false,
- readyTimeout: 30000,
- hostVerifier: await SSHHostKeyVerifier.createHostVerifier(
- parsedHostId,
- host.ip,
- host.port || 22,
- null,
- userId,
- false,
- ),
- };
+ const { client } = await connectSsh(host as unknown as PluginSshHost, {
+ purpose: "proxmox",
+ timeoutMs: 35000,
+ overrides: { tryKeyboard: false, readyTimeout: 30000 },
+ });
- const authType = resolvedCredentials.authType;
- if (authType === "key" && resolvedCredentials.sshKey) {
- sshConfig.privateKey = resolvedCredentials.sshKey;
- if (resolvedCredentials.keyPassword)
- sshConfig.passphrase = resolvedCredentials.keyPassword;
- } else if (authType === "agent") {
- const { applyAgentAuth } =
- await import("../../../../src/backend/hosts/terminal-auth-helpers.js");
- const result = await applyAgentAuth(
- sshConfig,
- host.terminalConfig as unknown as Record | undefined,
- );
- if ("error" in result) {
- const error = new Error(result.error);
- (error as Error & { status?: number }).status = 400;
- throw error;
- }
- } else if (resolvedCredentials.password) {
- sshConfig.password = resolvedCredentials.password;
- }
-
- const client = new SSHClient();
try {
- await new Promise((resolve, reject) => {
- client.on("ready", resolve);
- client.on("error", reject);
-
- // Reuse the shared jump-host chain (same path terminal/metrics use)
- // so Proxmox hosts that are only reachable via a jump host work too
- // (otherwise the direct connect fails with EHOSTUNREACH). jumpHosts is
- // stored as a JSON string on the decrypted record, so parse it first.
- let parsedJumpHosts: Array<{ hostId: number }> = [];
- try {
- const rawJumpHosts = (host as { jumpHosts?: unknown }).jumpHosts;
- const parsed =
- typeof rawJumpHosts === "string"
- ? JSON.parse(rawJumpHosts)
- : rawJumpHosts;
- if (Array.isArray(parsed)) parsedJumpHosts = parsed;
- } catch {
- parsedJumpHosts = [];
- }
-
- if (parsedJumpHosts.length > 0) {
- createJumpHostChain(parsedJumpHosts, userId)
- .then((jumpClient) => {
- if (!jumpClient) {
- reject(new Error("Jump host chain could not be established"));
- return;
- }
- jumpClient.forwardOut(
- "127.0.0.1",
- 0,
- sshConfig.host as string,
- sshConfig.port as number,
- (err, stream) => {
- if (err || !stream) {
- reject(err || new Error("Jump host forward failed"));
- return;
- }
- sshConfig.sock = stream;
- delete sshConfig.host;
- delete sshConfig.port;
- client.connect(sshConfig as import("ssh2").ConnectConfig);
- },
- );
- })
- .catch(reject);
- } else {
- client.connect(sshConfig as import("ssh2").ConnectConfig);
- }
- });
-
proxmoxLogger.info("Proxmox discovery SSH connection established", {
operation: "proxmox_discover",
hostId: parsedHostId,
diff --git a/plugins/proxmox/src/backend/ssh.ts b/plugins/proxmox/src/backend/ssh.ts
new file mode 100644
index 000000000..b7a221543
--- /dev/null
+++ b/plugins/proxmox/src/backend/ssh.ts
@@ -0,0 +1,36 @@
+import type { Client } from "ssh2";
+import type {
+ PluginSsh,
+ PluginSshConnection,
+ PluginSshConnectOptions,
+ PluginSshHost,
+} from "@termix/plugin-sdk/backend";
+
+let current: PluginSsh | null = null;
+
+/** Set in activate, cleared on deactivate. */
+export function setPluginSsh(ssh: PluginSsh | null): void {
+ current = ssh;
+}
+
+export function pluginSsh(): PluginSsh {
+ if (!current) throw new Error("The plugin is not active");
+ return current;
+}
+
+/** withConnection with ssh2's Client type filled in. */
+export function withSshConnection(
+ host: number | PluginSshHost,
+ options: PluginSshConnectOptions & { pool: string },
+ fn: (client: Client) => Promise,
+): Promise {
+ return pluginSsh().withConnection(host, options, fn);
+}
+
+/** connect with ssh2's Client type filled in. */
+export function connectSsh(
+ host: number | PluginSshHost,
+ options?: PluginSshConnectOptions,
+): Promise> {
+ return pluginSsh().connect(host, options);
+}
diff --git a/plugins/proxmox/src/frontend/HostProxmoxTab.tsx b/plugins/proxmox/src/frontend/HostProxmoxTab.tsx
index 9b9777095..fb44d2575 100644
--- a/plugins/proxmox/src/frontend/HostProxmoxTab.tsx
+++ b/plugins/proxmox/src/frontend/HostProxmoxTab.tsx
@@ -1,5 +1,5 @@
import { useEffect, useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
+import { useSshAuthTypes, useTranslation } from "@termix/plugin-sdk/frontend";
import { Server } from "lucide-react";
import { Input } from "@/components/input";
import { SectionCard, SettingRow, FakeSwitch } from "@/components/section-card";
@@ -20,6 +20,7 @@ export function HostProxmoxTab({
setField: SetHostField;
}) {
const { t } = useTranslation();
+ const sshAuthTypes = useSshAuthTypes();
const [credentials, setCredentials] = useState<
{ id: number; name: string; username: string | null }[]
>([]);
@@ -107,14 +108,11 @@ export function HostProxmoxTab({
}
className="h-7 w-44 text-xs border border-border bg-background px-2 outline-none focus:ring-1 focus:ring-ring"
>
-
-
-
-
-
-
+ {sshAuthTypes.types.map((option) => (
+
+ ))}
setPluginSsh(null));
await startGuacamoleService();
startRemoteDesktopService(ctx.http.router());
diff --git a/plugins/remote-desktop/src/backend/routes.ts b/plugins/remote-desktop/src/backend/routes.ts
index db2871a53..b865adddb 100644
--- a/plugins/remote-desktop/src/backend/routes.ts
+++ b/plugins/remote-desktop/src/backend/routes.ts
@@ -19,7 +19,8 @@ import {
createCurrentSettingsRepository,
} from "../../../../src/backend/database/repositories/factory.js";
import { resolveGuacdOptions } from "../../../../src/backend/utils/guacd-config.js";
-import { createJumpHostChain } from "../../../../src/backend/hosts/jump-host-chain.js";
+import type { Client } from "ssh2";
+import { pluginSsh } from "./ssh.js";
import { getGuacSessionByConnectId } from "./guacamole-server.js";
import {
logAudit,
@@ -545,18 +546,9 @@ router.post(
try {
// The chain dials the first hop through that hop's own SOCKS5
// settings; the target host's proxy config does not apply to it.
- const jumpClient = await createJumpHostChain(jumpHosts, userId);
-
- if (!jumpClient) {
- guacLogger.error(
- "Failed to establish jump host chain for guacamole",
- undefined,
- { operation: "guac_ssh_tunnel_error", hostId },
- );
- return res.status(500).json({
- error: "Failed to establish SSH tunnel to remote host",
- });
- }
+ const { client: jumpClient } = await pluginSsh().jumpChain(
+ jumpHosts as Array<{ hostId: number }>,
+ );
const targetHostname = hostname;
const targetPort = port;
diff --git a/plugins/remote-desktop/src/backend/ssh.ts b/plugins/remote-desktop/src/backend/ssh.ts
new file mode 100644
index 000000000..b7a221543
--- /dev/null
+++ b/plugins/remote-desktop/src/backend/ssh.ts
@@ -0,0 +1,36 @@
+import type { Client } from "ssh2";
+import type {
+ PluginSsh,
+ PluginSshConnection,
+ PluginSshConnectOptions,
+ PluginSshHost,
+} from "@termix/plugin-sdk/backend";
+
+let current: PluginSsh | null = null;
+
+/** Set in activate, cleared on deactivate. */
+export function setPluginSsh(ssh: PluginSsh | null): void {
+ current = ssh;
+}
+
+export function pluginSsh(): PluginSsh {
+ if (!current) throw new Error("The plugin is not active");
+ return current;
+}
+
+/** withConnection with ssh2's Client type filled in. */
+export function withSshConnection(
+ host: number | PluginSshHost,
+ options: PluginSshConnectOptions & { pool: string },
+ fn: (client: Client) => Promise,
+): Promise {
+ return pluginSsh().withConnection(host, options, fn);
+}
+
+/** connect with ssh2's Client type filled in. */
+export function connectSsh(
+ host: number | PluginSshHost,
+ options?: PluginSshConnectOptions,
+): Promise> {
+ return pluginSsh().connect(host, options);
+}
diff --git a/plugins/web-endpoint/src/backend/index.ts b/plugins/web-endpoint/src/backend/index.ts
index 0e3a16d0d..755c2a8a6 100644
--- a/plugins/web-endpoint/src/backend/index.ts
+++ b/plugins/web-endpoint/src/backend/index.ts
@@ -1,7 +1,10 @@
import type { PluginContext } from "@termix/plugin-sdk/backend";
+import { setPluginSsh } from "./ssh.js";
import { startWebEndpointService, stopWebEndpointService } from "./routes.js";
export async function activate(ctx: PluginContext) {
+ setPluginSsh(ctx.ssh);
+ ctx.disposables.add(() => setPluginSsh(null));
startWebEndpointService(ctx.http.router());
ctx.log.info("Web Endpoint routes mounted at /plugin-api/web-endpoint");
}
diff --git a/plugins/web-endpoint/src/backend/ssh.ts b/plugins/web-endpoint/src/backend/ssh.ts
new file mode 100644
index 000000000..b7a221543
--- /dev/null
+++ b/plugins/web-endpoint/src/backend/ssh.ts
@@ -0,0 +1,36 @@
+import type { Client } from "ssh2";
+import type {
+ PluginSsh,
+ PluginSshConnection,
+ PluginSshConnectOptions,
+ PluginSshHost,
+} from "@termix/plugin-sdk/backend";
+
+let current: PluginSsh | null = null;
+
+/** Set in activate, cleared on deactivate. */
+export function setPluginSsh(ssh: PluginSsh | null): void {
+ current = ssh;
+}
+
+export function pluginSsh(): PluginSsh {
+ if (!current) throw new Error("The plugin is not active");
+ return current;
+}
+
+/** withConnection with ssh2's Client type filled in. */
+export function withSshConnection(
+ host: number | PluginSshHost,
+ options: PluginSshConnectOptions & { pool: string },
+ fn: (client: Client) => Promise,
+): Promise {
+ return pluginSsh().withConnection(host, options, fn);
+}
+
+/** connect with ssh2's Client type filled in. */
+export function connectSsh(
+ host: number | PluginSshHost,
+ options?: PluginSshConnectOptions,
+): Promise> {
+ return pluginSsh().connect(host, options);
+}
diff --git a/scripts/plugin-boundary-allowlist.json b/scripts/plugin-boundary-allowlist.json
index d98826ede..1493addc1 100644
--- a/scripts/plugin-boundary-allowlist.json
+++ b/scripts/plugin-boundary-allowlist.json
@@ -139,7 +139,6 @@
"plugins/docker/src/backend/session-manager.ts",
"plugins/fleets/src/backend/routes.ts",
"plugins/host-metrics/src/backend/automation-bridge.ts",
- "plugins/host-metrics/src/backend/helpers.ts",
"plugins/host-metrics/src/backend/history-routes.ts",
"plugins/host-metrics/src/backend/managers/cron.ts",
"plugins/host-metrics/src/backend/managers/firewall.ts",
diff --git a/src/backend/auth/builtin-login-methods.ts b/src/backend/auth/builtin-login-methods.ts
new file mode 100644
index 000000000..83d38adf1
--- /dev/null
+++ b/src/backend/auth/builtin-login-methods.ts
@@ -0,0 +1,116 @@
+/**
+ * Password login, core's one built-in method. It only proves who the user is;
+ * the pipeline does second factors and the session.
+ */
+
+import bcrypt from "bcryptjs";
+import { authLogger } from "../utils/logger.js";
+import { loginRateLimiter } from "../utils/login-rate-limiter.js";
+import { isTrustedProxyAuthEnabled } from "../utils/trusted-proxy-auth.js";
+import { createCurrentUserRepository } from "../database/repositories/factory.js";
+import { getPasswordLoginStatus } from "./core-auth.js";
+import { registerLoginMethod, type LoginMethod } from "./registry.js";
+import { LoginMethodError, type VerifiedIdentity } from "./types.js";
+
+function nonEmpty(value: unknown): value is string {
+ return typeof value === "string" && value.trim().length > 0;
+}
+
+export async function verifyPasswordLogin(request: {
+ body: Record;
+ ip?: string;
+ socket?: { remoteAddress?: string };
+}): Promise {
+ if (isTrustedProxyAuthEnabled()) {
+ throw new LoginMethodError(
+ "Password login is disabled while trusted proxy authentication is enabled",
+ 403,
+ );
+ }
+
+ const { username, password } = request.body;
+ const clientIp = request.ip || request.socket?.remoteAddress || "unknown";
+
+ if (!nonEmpty(username) || !nonEmpty(password)) {
+ throw new LoginMethodError("Invalid username or password", 400);
+ }
+
+ const lockStatus = loginRateLimiter.isLocked(clientIp, username);
+ if (lockStatus.locked) {
+ authLogger.warn("Login attempt blocked due to rate limiting", {
+ operation: "user_login_blocked",
+ username,
+ ip: clientIp,
+ remainingTime: lockStatus.remainingTime,
+ });
+ const error = new LoginMethodError(
+ "Too many login attempts. Please try again later.",
+ 429,
+ );
+ Object.assign(error, { remainingTime: lockStatus.remainingTime });
+ throw error;
+ }
+
+ if (!(await getPasswordLoginStatus()).allowed) {
+ throw new LoginMethodError(
+ "Password authentication is currently disabled",
+ 403,
+ );
+ }
+
+ const user = await createCurrentUserRepository().findByUsername(username);
+ if (!user) {
+ loginRateLimiter.recordFailedAttempt(clientIp, username);
+ authLogger.warn("Login failed: user not found", {
+ operation: "user_login",
+ username,
+ ip: clientIp,
+ });
+ throw new LoginMethodError("Invalid username or password", 401);
+ }
+
+ if (user.isOidc && (!user.passwordHash || user.passwordHash.trim() === "")) {
+ authLogger.warn("OIDC-only user attempted traditional login", {
+ operation: "user_login",
+ username,
+ userId: user.id,
+ });
+ throw new LoginMethodError("This user uses external authentication", 403);
+ }
+
+ const isMatch = await bcrypt.compare(password, user.passwordHash);
+ if (!isMatch) {
+ loginRateLimiter.recordFailedAttempt(clientIp, username);
+ authLogger.warn("Login failed: incorrect password", {
+ operation: "user_login",
+ username,
+ userId: user.id,
+ ip: clientIp,
+ });
+ throw new LoginMethodError("Invalid username or password", 401);
+ }
+
+ return {
+ kind: "user",
+ userId: user.id,
+ password,
+ rememberMe: !!request.body.rememberMe,
+ rateLimitUsername: username,
+ };
+}
+
+export const passwordLoginMethod: LoginMethod = {
+ id: "password",
+ pluginId: "core",
+ labelKey: "auth.password",
+ kind: "form",
+ describe: async () => {
+ const status = await getPasswordLoginStatus();
+ return [{ id: "password", label: "Password", enabled: status.allowed }];
+ },
+ verify: (request) => verifyPasswordLogin(request as never),
+};
+
+export function registerPasswordLoginMethod(): () => void {
+ return registerLoginMethod(passwordLoginMethod);
+}
diff --git a/src/backend/auth/core-auth.ts b/src/backend/auth/core-auth.ts
new file mode 100644
index 000000000..2b8aaf05f
--- /dev/null
+++ b/src/backend/auth/core-auth.ts
@@ -0,0 +1,79 @@
+/**
+ * Core's own login method (password) and the lockout guard.
+ */
+
+import { getCurrentSettingValue } from "../database/repositories/factory.js";
+import { authLogger } from "../utils/logger.js";
+import { isTrustedProxyAuthEnabled } from "../utils/trusted-proxy-auth.js";
+import { registerPasswordLoginMethod } from "./builtin-login-methods.js";
+import { registerLegacyLoginProviders } from "./legacy-providers.js";
+import { listLoginMethods } from "./registry.js";
+
+let registered = false;
+
+/** Registers core's login methods and factors once. */
+export function ensureCoreLoginProviders(): void {
+ if (registered) return;
+ registered = true;
+ registerPasswordLoginMethod();
+ registerLegacyLoginProviders();
+}
+
+/** Test helper. */
+export function resetCoreLoginProvidersForTests(): void {
+ registered = false;
+}
+
+/** The admin setting (or ALLOW_PASSWORD_LOGIN), before the lockout guard. */
+export function isPasswordLoginSettingOn(): boolean {
+ const envVal = process.env.ALLOW_PASSWORD_LOGIN;
+ if (envVal !== undefined) return envVal.trim().toLowerCase() === "true";
+ try {
+ const value = getCurrentSettingValue("allow_password_login");
+ return value ? value === "true" : true;
+ } catch {
+ return true;
+ }
+}
+
+/**
+ * Whether anyone could still sign in without a password: trusted proxy auth,
+ * or a login method reporting an enabled instance (an SSO provider).
+ */
+export async function hasOtherEnabledLoginMethod(): Promise {
+ if (isTrustedProxyAuthEnabled()) return true;
+ ensureCoreLoginProviders();
+ for (const method of listLoginMethods()) {
+ if (method.id === "password" || !method.describe) continue;
+ try {
+ const instances = await method.describe();
+ if (instances.some((instance) => instance.enabled)) return true;
+ } catch {
+ // A method that cannot describe itself does not count.
+ }
+ }
+ return false;
+}
+
+export interface PasswordLoginStatus {
+ allowed: boolean;
+ /** Turned off by the admin but kept on so nobody is locked out. */
+ forced: boolean;
+}
+
+/**
+ * Password login is off only when the admin turned it off AND another way to
+ * sign in exists. Otherwise it stays on, with a warning, so that disabling it
+ * (or losing the only SSO provider) can never lock everyone out.
+ */
+export async function getPasswordLoginStatus(): Promise {
+ if (isPasswordLoginSettingOn()) return { allowed: true, forced: false };
+ if (await hasOtherEnabledLoginMethod()) {
+ return { allowed: false, forced: false };
+ }
+ authLogger.warn(
+ "Password login is disabled but no other login method is enabled; keeping it on",
+ { operation: "password_login_lockout_guard" },
+ );
+ return { allowed: true, forced: true };
+}
diff --git a/src/backend/auth/legacy-providers.ts b/src/backend/auth/legacy-providers.ts
new file mode 100644
index 000000000..67c762596
--- /dev/null
+++ b/src/backend/auth/legacy-providers.ts
@@ -0,0 +1,393 @@
+/**
+ * Auth methods that still live in core for 2.9.0, registered through the same
+ * interfaces a plugin uses. Phase C moves each one into its own plugin by
+ * relocating its block from here; D1 deletes this file once it is empty.
+ *
+ * Nothing outside this file should branch on these type names.
+ */
+
+import { getErrorMessage } from "../utils/error-message.js";
+import { sshLogger } from "../utils/logger.js";
+import {
+ registerKeyboardInteractiveInterceptor,
+ registerSshAuthProvider,
+} from "../hosts/connect/auth-provider-registry.js";
+import type {
+ SshAuthProvider,
+ SshConnectHost,
+} from "../hosts/connect/types.js";
+import {
+ registerLoginMethod,
+ registerSecondFactor,
+ type LoginMethod,
+} from "./registry.js";
+import { totpSecondFactor } from "./legacy/totp-factor.js";
+
+const OPKSSH_REQUIRED_MESSAGE =
+ "OPKSSH authentication required. Please open a Terminal connection to this host first to complete browser-based authentication. Your session will be cached for 24 hours.";
+
+const VAULT_REQUIRED_MESSAGE =
+ "Vault SSH signer authentication required. Please open a Terminal connection first.";
+
+const AUTH_FAILED_PATTERN = /All configured authentication methods failed/i;
+
+/** How long a Tailscale check-mode login may sit waiting for approval. */
+export const TAILSCALE_CHECK_TIMEOUT_MS = 1_800_000;
+
+function issuedCertificateProvider(
+ type: "opkssh" | "stepca",
+ labelKey: string,
+): SshAuthProvider {
+ return {
+ type,
+ pluginId: "core",
+ labelKey,
+ needsUserInteraction: true,
+ supportsBackground: false,
+ interaction: "opkssh",
+ prepare: async (config, host, env) => {
+ const { getOPKSSHToken } = await import("../hosts/opkssh-auth.js");
+ const token = await getOPKSSHToken(env.userId, env.hostId);
+ if (!token) {
+ env.log("info", "No valid certificate found, requesting sign-in");
+ return {
+ status: "interaction-required",
+ interaction: "opkssh",
+ message: OPKSSH_REQUIRED_MESSAGE,
+ flag: "requiresOPKSSHAuth",
+ };
+ }
+ try {
+ const { setupOPKSSHCertAuth } =
+ await import("../hosts/opkssh-cert-auth.js");
+ await setupOPKSSHCertAuth(config, env.client, token, host.username);
+ } catch (error) {
+ return {
+ status: "error",
+ code: "failed",
+ message: "OPKSSH authentication failed: " + getErrorMessage(error),
+ };
+ }
+ env.log("info", "Using cached SSH certificate");
+ return { status: "ready" };
+ },
+ onAuthFailed: (_host, env, context) => {
+ if (!AUTH_FAILED_PATTERN.test(context.error.message)) return;
+ sshLogger.warn("OPKSSH authentication failed - invalidating token", {
+ operation: "opkssh_auth_failed",
+ hostId: env.hostId,
+ userId: env.userId,
+ });
+ void import("../hosts/opkssh-auth.js")
+ .then(({ invalidateOPKSSHToken }) =>
+ invalidateOPKSSHToken(env.userId, env.hostId, "SSH auth failed"),
+ )
+ .catch(() => {});
+ return {
+ status: "interaction-required",
+ interaction: "opkssh",
+ message:
+ "OPKSSH authentication failed or expired. Please authenticate again.",
+ };
+ },
+ startInteraction: async (request) => {
+ if (type === "stepca") {
+ const { startStepCaAuth } = await import("../hosts/step-ca-auth.js");
+ await startStepCaAuth(
+ request.userId,
+ request.hostId,
+ request.host.username,
+ request.socket,
+ request.requestOrigin,
+ );
+ return;
+ }
+ const { startOPKSSHAuth } = await import("../hosts/opkssh-auth.js");
+ await startOPKSSHAuth(
+ request.userId,
+ request.hostId,
+ request.host.name || request.host.ip,
+ request.socket,
+ request.requestOrigin,
+ );
+ },
+ };
+}
+
+function vaultProfileId(host: SshConnectHost): number | undefined {
+ return host.vaultProfile?.id ?? undefined;
+}
+
+const vaultProvider: SshAuthProvider = {
+ type: "vault",
+ pluginId: "core",
+ labelKey: "hosts.filterAuthVault",
+ needsUserInteraction: true,
+ interaction: "vault",
+ prepare: async (config, host, env) => {
+ const profileId = vaultProfileId(host);
+ if (!profileId) {
+ return {
+ status: "error",
+ code: "failed",
+ message: "Host has no Vault signer profile configured",
+ };
+ }
+ const { getVaultCert } = await import("../hosts/vault-signer-auth.js");
+ const cert = await getVaultCert(env.userId, profileId);
+ if (!cert) {
+ env.log(
+ "info",
+ "No valid Vault certificate found, requesting authentication",
+ );
+ return {
+ status: "interaction-required",
+ interaction: "vault",
+ message: VAULT_REQUIRED_MESSAGE,
+ flag: "requiresVaultAuth",
+ };
+ }
+ try {
+ const { setupOPKSSHCertAuth } =
+ await import("../hosts/opkssh-cert-auth.js");
+ await setupOPKSSHCertAuth(
+ config,
+ env.client,
+ { privateKey: cert.privateKey, sshCert: cert.sshCert },
+ host.username,
+ );
+ } catch (error) {
+ return {
+ status: "error",
+ code: "failed",
+ message:
+ "Vault SSH signer authentication failed: " + getErrorMessage(error),
+ };
+ }
+ env.log("info", "Using cached Vault-signed certificate");
+ return { status: "ready" };
+ },
+ onAuthFailed: (host, env, context) => {
+ if (!AUTH_FAILED_PATTERN.test(context.error.message)) return;
+ sshLogger.warn("Vault certificate authentication failed", {
+ operation: "vault_auth_failed",
+ hostId: env.hostId,
+ userId: env.userId,
+ });
+ const profileId = vaultProfileId(host);
+ if (profileId) {
+ void import("../hosts/vault-signer-auth.js")
+ .then(({ deleteVaultCert }) => deleteVaultCert(env.userId, profileId))
+ .catch(() => {});
+ }
+ return {
+ status: "interaction-required",
+ interaction: "vault",
+ message:
+ "Vault authentication failed or expired. Please authenticate again.",
+ };
+ },
+ startInteraction: async (request) => {
+ const { loadVaultProfileForHost, startVaultAuth } =
+ await import("../hosts/vault-oidc-auth.js");
+ const profile = await loadVaultProfileForHost(
+ request.hostId,
+ request.userId,
+ );
+ if (!profile) {
+ throw new Error("No Vault signer profile configured for this host");
+ }
+ await startVaultAuth(
+ request.userId,
+ request.hostId,
+ profile,
+ request.socket,
+ request.requestOrigin,
+ );
+ },
+};
+
+const tailscaleProvider: SshAuthProvider = {
+ type: "tailscale",
+ pluginId: "core",
+ labelKey: "hosts.filterAuthTailscale",
+ connectOptions: (_host, purpose) =>
+ purpose === "terminal"
+ ? {
+ tryKeyboard: false,
+ readyTimeout: TAILSCALE_CHECK_TIMEOUT_MS,
+ // The socket sits idle while a check-mode login is pending.
+ timeout: TAILSCALE_CHECK_TIMEOUT_MS,
+ }
+ : { tryKeyboard: false },
+ prepare: async (_config, _host, env) => {
+ env.log("info", "Using Tailscale SSH");
+ return { status: "ready" };
+ },
+ onAuthFailed: (host, _env, context) => {
+ const failed =
+ context.methodNotAvailable ||
+ AUTH_FAILED_PATTERN.test(context.error.message);
+ if (!failed) return;
+
+ // Tailscale documents the "+password" suffix for clients that mishandle a
+ // successful "none" reply. The password value is ignored.
+ if (context.retries === 0 && context.canRetry) {
+ return {
+ status: "retry",
+ message: "Retrying Tailscale SSH in forced password mode",
+ patch: {
+ username: `${host.username}+password`,
+ password: "termix",
+ tryKeyboard: false,
+ },
+ };
+ }
+
+ return {
+ status: "error",
+ code: "failed",
+ message: `Tailscale SSH authentication failed for user "${host.username}". Ensure Tailscale is running on the server, SSH is advertised (tailscale set --ssh), and your ACL policy grants the "${host.username}" user to your identity. If your Tailscale identity maps to a different Unix user, update the username on this host.`,
+ };
+ },
+};
+
+const WARPGATE_PATTERN = /warpgate\s+authentication/i;
+
+let sshRegistered = false;
+
+export function registerLegacySshAuthProviders(): void {
+ if (sshRegistered) return;
+ sshRegistered = true;
+
+ registerSshAuthProvider(
+ issuedCertificateProvider("opkssh", "hosts.filterAuthOpkssh"),
+ );
+ registerSshAuthProvider(
+ issuedCertificateProvider("stepca", "hosts.filterAuthStepca"),
+ );
+ registerSshAuthProvider(vaultProvider);
+ registerSshAuthProvider(tailscaleProvider);
+
+ // Warpgate is a flag on a host, not an auth type: it shows up as a
+ // keyboard-interactive round with a sign-in URL.
+ registerKeyboardInteractiveInterceptor({
+ id: "warpgate",
+ pluginId: "core",
+ detect: ({ name, instructions, prompts }) => {
+ const texts = prompts.map((p) => p.prompt);
+ const isWarpgate =
+ WARPGATE_PATTERN.test(name) ||
+ WARPGATE_PATTERN.test(instructions) ||
+ texts.some((p) => WARPGATE_PATTERN.test(p));
+ if (!isWarpgate) return null;
+
+ const fullText = `${name}\n${instructions}\n${texts.join("\n")}`;
+ const urlMatch = fullText.match(/https?:\/\/[^\s\n]+/i);
+ if (!urlMatch) return null;
+ const keyMatch = fullText.match(
+ /security key[:\s]+([a-z0-9](?:\s+[a-z0-9]){3}|[a-z0-9]{4})/i,
+ );
+ return {
+ kind: "warpgate",
+ url: urlMatch[0],
+ securityKey: keyMatch ? keyMatch[1] : "N/A",
+ instructions,
+ };
+ },
+ // Warpgate asks for the password before its browser round; answer it
+ // silently so the only thing the user sees is the Warpgate dialog.
+ autoAnswerPasswords: (host) => host.useWarpgate === true,
+ });
+}
+
+// Login methods and second factors -------------------------------------------
+
+async function listPublicProviders(types: string[]) {
+ const { listPublicSsoProviders } =
+ await import("../database/routes/sso-provider-routes.js");
+ return (await listPublicSsoProviders()).filter((provider) =>
+ types.includes(provider.type),
+ );
+}
+
+const oidcLoginMethod: LoginMethod = {
+ id: "oidc",
+ pluginId: "core",
+ labelKey: "auth.loginWithSso",
+ icon: "key-round",
+ kind: "redirect",
+ describe: async () =>
+ (await listPublicProviders(["oidc", "github", "google"])).map(
+ (provider) => ({
+ id: String(provider.id),
+ label: provider.name,
+ enabled: true,
+ }),
+ ),
+ start: async (request, instanceId) => {
+ const { startOidcLogin } = await import("./legacy/oidc-login.js");
+ // Instance "0" is the provider synthesized from environment variables.
+ const result = await startOidcLogin(request as never, {
+ providerId: instanceId && instanceId !== "0" ? instanceId : undefined,
+ });
+ return { redirectUrl: result.auth_url };
+ },
+ callback: async (request) => {
+ const { handleOidcCallback } = await import("./legacy/oidc-login.js");
+ return handleOidcCallback(request as never);
+ },
+};
+
+const ldapLoginMethod: LoginMethod = {
+ id: "ldap",
+ pluginId: "core",
+ labelKey: "auth.loginWithLdap",
+ icon: "server",
+ kind: "form",
+ describe: async () =>
+ (await listPublicProviders(["ldap"])).map((provider) => ({
+ id: String(provider.id),
+ label: provider.name,
+ enabled: true,
+ })),
+ verify: async (request, instanceId) => {
+ const { verifyLdapLogin } = await import("./legacy/ldap-login.js");
+ const body = { ...request.body };
+ if (instanceId && !body.providerId) body.providerId = Number(instanceId);
+ return verifyLdapLogin({ body, ip: request.ip });
+ },
+};
+
+// Passkeys prove the user as well as possession, so a passkey login can
+// stand in for the second factor. No describe: a passkey only helps a user
+// who already registered one, so it never counts for the lockout guard.
+const passkeyLoginMethod: LoginMethod = {
+ id: "passkey",
+ pluginId: "core",
+ labelKey: "auth.loginWithPasskey",
+ icon: "fingerprint",
+ kind: "form",
+ verify: async (request) => {
+ const { verifyPasskeyLogin } =
+ await import("../database/routes/user-webauthn-routes.js");
+ return verifyPasskeyLogin(request as never);
+ },
+};
+
+let loginRegistered = false;
+
+export function registerLegacyLoginProviders(): void {
+ if (loginRegistered) return;
+ loginRegistered = true;
+ registerLoginMethod(oidcLoginMethod);
+ registerLoginMethod(ldapLoginMethod);
+ registerLoginMethod(passkeyLoginMethod);
+ registerSecondFactor(totpSecondFactor);
+}
+
+/** Test helper. */
+export function resetLegacyProvidersForTests(): void {
+ sshRegistered = false;
+ loginRegistered = false;
+}
diff --git a/src/backend/auth/legacy/ldap-login.ts b/src/backend/auth/legacy/ldap-login.ts
new file mode 100644
index 000000000..9e9eb77b7
--- /dev/null
+++ b/src/backend/auth/legacy/ldap-login.ts
@@ -0,0 +1,227 @@
+/**
+ * LDAP sign-in as a form login method. Moved out of the LDAP route so the
+ * pipeline issues the session; Phase C moves it into the LDAP plugin.
+ */
+
+import ldap from "ldapjs";
+import type { LDAPProviderConfig } from "../../../types/index.js";
+import { authLogger } from "../../utils/logger.js";
+import { loginRateLimiter } from "../../utils/login-rate-limiter.js";
+import { createCurrentSsoProviderRepository } from "../../database/repositories/factory.js";
+import { loadProviderConfig } from "../../database/routes/user-oidc-utils.js";
+import { LoginMethodError, type VerifiedIdentity } from "../types.js";
+
+export function ldapEscapeFilter(value: string): string {
+ return value.replace(
+ /[\\*()\x00]/g,
+ (c) => `\\${c.charCodeAt(0).toString(16).padStart(2, "0")}`,
+ );
+}
+
+function createLDAPClient(
+ host: string,
+ port: number,
+ useTLS: boolean,
+): ldap.Client {
+ const url = `${useTLS ? "ldaps" : "ldap"}://${host}:${port}`;
+ return ldap.createClient({
+ url,
+ tlsOptions: useTLS ? { rejectUnauthorized: false } : undefined,
+ });
+}
+
+function ldapBind(
+ client: ldap.Client,
+ dn: string,
+ password: string,
+): Promise {
+ return new Promise((resolve, reject) => {
+ client.bind(dn, password, (err) => {
+ if (err) reject(err);
+ else resolve();
+ });
+ });
+}
+
+function ldapSearch(
+ client: ldap.Client,
+ base: string,
+ filter: string,
+ attributes: string[],
+): Promise {
+ return new Promise((resolve, reject) => {
+ const entries: ldap.SearchEntry[] = [];
+ client.search(base, { filter, attributes, scope: "sub" }, (err, res) => {
+ if (err) return reject(err);
+ res.on("searchEntry", (entry) => entries.push(entry));
+ res.on("error", reject);
+ res.on("end", () => resolve(entries));
+ });
+ });
+}
+
+function ldapUnbind(client: ldap.Client): void {
+ try {
+ client.unbind();
+ } catch {
+ // best effort
+ }
+}
+
+function firstValue(entry: ldap.SearchEntry, key: string): string {
+ const attr = entry.attributes.find((a) => a.type === key);
+ if (!attr) return "";
+ return Array.isArray(attr.values) ? attr.values[0] : String(attr.values);
+}
+
+export async function verifyLdapLogin(request: {
+ body: Record;
+ ip?: string;
+}): Promise {
+ const { providerId, username, password, rememberMe } = request.body as {
+ providerId?: number;
+ username?: string;
+ password?: string;
+ rememberMe?: boolean;
+ };
+
+ if (!providerId || !username || !password) {
+ throw new LoginMethodError(
+ "providerId, username, and password are required",
+ 400,
+ );
+ }
+
+ // Same limits as password login: an LDAP bind is a password guess.
+ const clientIp = request.ip || "unknown";
+ const rateLimitKey = `ldap:${providerId}:${username}`;
+ const lockStatus = loginRateLimiter.isLocked(clientIp, rateLimitKey);
+ if (lockStatus.locked) {
+ const error = new LoginMethodError(
+ "Too many login attempts. Please try again later.",
+ 429,
+ );
+ Object.assign(error, { remainingTime: lockStatus.remainingTime });
+ throw error;
+ }
+
+ const provider =
+ await createCurrentSsoProviderRepository().findById(providerId);
+ if (!provider || provider.type !== "ldap" || !provider.enabled) {
+ throw new LoginMethodError("LDAP provider not found", 404);
+ }
+
+ const providerResult = await loadProviderConfig(providerId);
+ if (!providerResult) {
+ throw new LoginMethodError("LDAP provider not found", 404);
+ }
+ const config = providerResult.config as unknown as LDAPProviderConfig;
+ if (
+ !config.host ||
+ !config.bindDN ||
+ !config.userSearchBase ||
+ !config.userSearchFilter
+ ) {
+ throw new LoginMethodError("LDAP provider is misconfigured", 500);
+ }
+
+ const serviceClient = createLDAPClient(
+ config.host,
+ config.port || 389,
+ config.useTLS || false,
+ );
+ try {
+ await ldapBind(serviceClient, config.bindDN, config.bindPassword);
+
+ const filter = config.userSearchFilter.replace(
+ /\{\{username\}\}/g,
+ ldapEscapeFilter(username),
+ );
+ const entries = await ldapSearch(
+ serviceClient,
+ config.userSearchBase,
+ filter,
+ [
+ config.usernameAttribute || "uid",
+ config.displayNameAttribute || "cn",
+ "mail",
+ "email",
+ ],
+ );
+
+ if (entries.length === 0) {
+ loginRateLimiter.recordFailedAttempt(clientIp, rateLimitKey);
+ authLogger.warn("LDAP user not found", {
+ operation: "ldap_login",
+ username,
+ });
+ throw new LoginMethodError("Invalid username or password", 401);
+ }
+
+ const userEntry = entries[0];
+ const userDN = userEntry.dn.toString();
+ const ldapIdentifier =
+ firstValue(userEntry, config.usernameAttribute || "uid") || username;
+ const displayName =
+ firstValue(userEntry, config.displayNameAttribute || "cn") || username;
+ const email =
+ firstValue(userEntry, "mail") || firstValue(userEntry, "email") || "";
+
+ const userClient = createLDAPClient(
+ config.host,
+ config.port || 389,
+ config.useTLS || false,
+ );
+ try {
+ await ldapBind(userClient, userDN, password);
+ } catch {
+ loginRateLimiter.recordFailedAttempt(clientIp, rateLimitKey);
+ authLogger.warn("LDAP bind failed - wrong password", {
+ operation: "ldap_login",
+ ldapIdentifier,
+ });
+ throw new LoginMethodError("Invalid username or password", 401);
+ } finally {
+ ldapUnbind(userClient);
+ }
+
+ let isAdmin: boolean | undefined;
+ if (config.adminGroup && config.groupSearchBase) {
+ isAdmin = false;
+ try {
+ const groupEntries = await ldapSearch(
+ serviceClient,
+ config.groupSearchBase,
+ `(member=${ldapEscapeFilter(userDN)})`,
+ ["cn", "dn"],
+ );
+ isAdmin = groupEntries.some(
+ (group) =>
+ firstValue(group, "cn") === config.adminGroup ||
+ group.dn.toString() === config.adminGroup,
+ );
+ } catch (groupErr) {
+ authLogger.warn("LDAP group check failed", {
+ operation: "ldap_group_check",
+ error: groupErr,
+ });
+ }
+ }
+
+ return {
+ kind: "external",
+ provider: String(providerId),
+ subject: ldapIdentifier,
+ email: email || null,
+ name: displayName,
+ isAdmin,
+ allowedUsers: config.allowedUsers ?? null,
+ legacyIdentifier: `ldap:${providerId}:${ldapIdentifier}`,
+ ssoProviderId: providerId,
+ rememberMe: !!rememberMe,
+ rateLimitUsername: rateLimitKey,
+ };
+ } finally {
+ ldapUnbind(serviceClient);
+ }
+}
diff --git a/src/backend/auth/legacy/oidc-login.ts b/src/backend/auth/legacy/oidc-login.ts
new file mode 100644
index 000000000..aa265eded
--- /dev/null
+++ b/src/backend/auth/legacy/oidc-login.ts
@@ -0,0 +1,518 @@
+/**
+ * OIDC, GitHub and Google sign-in, moved out of the users routes so they can
+ * register as a login method. Phase C moves this into the OIDC plugin.
+ *
+ * start builds the provider's authorize URL; callback turns the provider's
+ * answer into a verified identity. Neither touches sessions.
+ */
+
+import crypto from "crypto";
+import type { Request } from "express";
+import { nanoid } from "nanoid";
+import { authLogger } from "../../utils/logger.js";
+import { getRequestOriginWithForceHTTPS } from "../../utils/request-origin.js";
+import { getDesktopOidcCallbackUrl } from "../../utils/oidc-desktop-callback.js";
+import { createCurrentSettingsRepository } from "../../database/repositories/factory.js";
+import {
+ OIDCTokenFormatError,
+ buildFetchOptions,
+ extractOidcGroupsFromSources,
+ loadProviderConfig,
+ parseOidcRoleMap,
+ resolveOidcMappedRoles,
+ verifyOIDCToken,
+} from "../../database/routes/user-oidc-utils.js";
+import { LoginMethodError, type VerifiedIdentity } from "../types.js";
+
+/** An error raised after the return address is known redirects there. */
+export class RedirectLoginError extends LoginMethodError {
+ constructor(
+ message: string,
+ readonly returnTo: string,
+ status = 400,
+ code?: string,
+ ) {
+ super(message, status, code);
+ this.name = "RedirectLoginError";
+ }
+}
+
+/** Provider id used for OIDC identities that came from env configuration. */
+export const LEGACY_OIDC_PROVIDER_ID = "legacy-oidc";
+
+function nonEmpty(value: unknown): value is string {
+ return typeof value === "string" && value.trim().length > 0;
+}
+
+// RFC 7636 PKCE: 43-128 char unreserved-character string.
+function generatePkceCodeVerifier(): string {
+ return crypto.randomBytes(64).toString("base64url");
+}
+
+function generatePkceCodeChallenge(verifier: string): string {
+ return crypto.createHash("sha256").update(verifier).digest("base64url");
+}
+
+export async function deleteOIDCStateSettings(state: string): Promise {
+ const settingsRepository = createCurrentSettingsRepository();
+ await settingsRepository.delete(`oidc_state_${state}`);
+ await settingsRepository.delete(`oidc_backend_callback_${state}`);
+ await settingsRepository.delete(`oidc_frontend_origin_${state}`);
+ await settingsRepository.delete(`oidc_remember_me_${state}`);
+ await settingsRepository.delete(`oidc_provider_${state}`);
+ await settingsRepository.delete(`oidc_pkce_verifier_${state}`);
+}
+
+export async function startOidcLogin(
+ req: Request,
+ overrides: { providerId?: string | null } = {},
+): Promise<{ auth_url: string; state: string; nonce: string }> {
+ const { rememberMe, desktopCallbackPort, appCallbackUrl } = req.query;
+ const providerIdStr = overrides.providerId ?? req.query.providerId;
+ const origin = getRequestOriginWithForceHTTPS(req);
+ const basePath = (process.env.BASE_PATH || "").replace(/\/+$/, "");
+ const backendCallbackUri = `${origin}${basePath}/users/oidc/callback`;
+
+ const resolvedProviderId = providerIdStr
+ ? parseInt(providerIdStr as string, 10)
+ : null;
+ const providerResult = await loadProviderConfig(
+ resolvedProviderId || undefined,
+ );
+ if (!providerResult) {
+ throw new LoginMethodError("OIDC not configured", 404);
+ }
+ const { config, providerDbId } = providerResult;
+ const state = nanoid();
+ const nonce = nanoid();
+
+ const referer = req.get("Referer");
+ let frontendOrigin: string;
+ if (desktopCallbackPort) {
+ frontendOrigin = getDesktopOidcCallbackUrl(desktopCallbackPort);
+ if (!frontendOrigin) {
+ throw new LoginMethodError("Invalid desktop callback port", 400);
+ }
+ } else if (typeof appCallbackUrl === "string" && appCallbackUrl) {
+ let callbackUrl: URL;
+ try {
+ callbackUrl = new URL(appCallbackUrl);
+ } catch {
+ throw new LoginMethodError("Invalid app callback URL", 400);
+ }
+ if (callbackUrl.protocol !== "termix-mobile:") {
+ throw new LoginMethodError("Unsupported app callback URL", 400);
+ }
+ frontendOrigin = callbackUrl.toString();
+ } else if (referer) {
+ const refererUrl = new URL(referer);
+ frontendOrigin = `${refererUrl.protocol}//${refererUrl.host}`;
+ } else {
+ frontendOrigin = origin;
+ }
+
+ const codeVerifier = generatePkceCodeVerifier();
+ const codeChallenge = generatePkceCodeChallenge(codeVerifier);
+
+ const settingsRepository = createCurrentSettingsRepository();
+ await settingsRepository.set(`oidc_state_${state}`, nonce);
+ await settingsRepository.set(
+ `oidc_backend_callback_${state}`,
+ backendCallbackUri,
+ );
+ await settingsRepository.set(`oidc_frontend_origin_${state}`, frontendOrigin);
+ await settingsRepository.set(
+ `oidc_remember_me_${state}`,
+ rememberMe === "true" ? "true" : "false",
+ );
+ await settingsRepository.set(`oidc_pkce_verifier_${state}`, codeVerifier);
+ if (providerDbId != null) {
+ await settingsRepository.set(
+ `oidc_provider_${state}`,
+ String(providerDbId),
+ );
+ }
+
+ const authUrl = new URL(config.authorization_url);
+ authUrl.searchParams.set("client_id", config.client_id);
+ authUrl.searchParams.set("redirect_uri", backendCallbackUri);
+ authUrl.searchParams.set("response_type", "code");
+ authUrl.searchParams.set("scope", config.scopes);
+ authUrl.searchParams.set("state", state);
+ authUrl.searchParams.set("nonce", nonce);
+ authUrl.searchParams.set("code_challenge", codeChallenge);
+ authUrl.searchParams.set("code_challenge_method", "S256");
+
+ return { auth_url: authUrl.toString(), state, nonce };
+}
+
+type ProviderConfig = NonNullable<
+ Awaited>
+>["config"];
+
+async function githubIdentity(
+ code: string,
+ state: string,
+ config: ProviderConfig,
+ providerDbId: number | null,
+ backendCallbackUri: string,
+ frontendOrigin: string,
+ rememberMe: boolean,
+): Promise {
+ const fetchOptions = buildFetchOptions(config.ca_cert);
+ const tokenResponse = await fetch(config.token_url, {
+ method: "POST",
+ headers: {
+ "Content-Type": "application/x-www-form-urlencoded",
+ Accept: "application/json",
+ },
+ body: new URLSearchParams({
+ grant_type: "authorization_code",
+ client_id: config.client_id,
+ client_secret: config.client_secret,
+ code,
+ redirect_uri: backendCallbackUri,
+ }),
+ ...fetchOptions,
+ });
+
+ if (!tokenResponse.ok) {
+ const errorText = await tokenResponse.text();
+ authLogger.error("GitHub token exchange failed", {
+ operation: "github_token_exchange_failed",
+ status: tokenResponse.status,
+ errorResponse: errorText,
+ });
+ throw new LoginMethodError("Failed to exchange authorization code", 400);
+ }
+
+ const tokenData = (await tokenResponse.json()) as Record;
+ await deleteOIDCStateSettings(state);
+
+ const userInfoResponse = await fetch("https://api.github.com/user", {
+ headers: {
+ Authorization: `Bearer ${tokenData.access_token}`,
+ Accept: "application/json",
+ "User-Agent": "Termix",
+ },
+ ...fetchOptions,
+ });
+ if (!userInfoResponse.ok) {
+ throw new LoginMethodError("Failed to get GitHub user information", 400);
+ }
+ const userInfo = (await userInfoResponse.json()) as Record;
+
+ const emailResponse = await fetch("https://api.github.com/user/emails", {
+ headers: {
+ Authorization: `Bearer ${tokenData.access_token}`,
+ Accept: "application/json",
+ "User-Agent": "Termix",
+ },
+ });
+ if (emailResponse.ok) {
+ const emails = (await emailResponse.json()) as Array<{
+ email: string;
+ primary: boolean;
+ verified: boolean;
+ }>;
+ const primary = emails.find((e) => e.primary && e.verified);
+ if (primary) userInfo.email = primary.email;
+ }
+
+ const subject = String(userInfo.id ?? userInfo.login);
+ const legacyIdentifier = `github:${providerDbId}:${subject}`;
+ return {
+ kind: "external",
+ provider: String(providerDbId ?? LEGACY_OIDC_PROVIDER_ID),
+ subject,
+ email: (userInfo.email as string | undefined) ?? null,
+ name: ((userInfo.name || userInfo.login) as string) || legacyIdentifier,
+ allowedUsers: config.allowed_users ?? null,
+ legacyIdentifier,
+ ssoProviderId: providerDbId,
+ returnTo: frontendOrigin,
+ rememberMe,
+ };
+}
+
+function getNestedValue(obj: Record, path: string): unknown {
+ if (!path || !obj) return null;
+ return path
+ .split(".")
+ .reduce(
+ (current, key) => (current as Record)?.[key],
+ obj,
+ );
+}
+
+/**
+ * The provider's callback. Throws RedirectLoginError once the return address
+ * is known, and a plain LoginMethodError (answered as JSON) before that.
+ */
+export async function handleOidcCallback(
+ req: Request,
+): Promise {
+ const { code, state } = req.query;
+ if (!nonEmpty(code) || !nonEmpty(state)) {
+ throw new LoginMethodError("Code and state are required", 400);
+ }
+
+ const settingsRepository = createCurrentSettingsRepository();
+ const backendCallbackUri = await settingsRepository.get(
+ `oidc_backend_callback_${state}`,
+ );
+ const frontendOrigin = await settingsRepository.get(
+ `oidc_frontend_origin_${state}`,
+ );
+ const rememberMe =
+ (await settingsRepository.get(`oidc_remember_me_${state}`)) === "true";
+ const codeVerifier = await settingsRepository.get(
+ `oidc_pkce_verifier_${state}`,
+ );
+
+ if (!backendCallbackUri || !frontendOrigin) {
+ throw new LoginMethodError(
+ "Invalid state parameter - redirect URIs not found",
+ 400,
+ );
+ }
+
+ try {
+ const storedNonce = await settingsRepository.get(`oidc_state_${state}`);
+ if (!storedNonce) {
+ throw new LoginMethodError("Invalid state parameter", 400);
+ }
+
+ const storedProviderId = await settingsRepository.get(
+ `oidc_provider_${state}`,
+ );
+ const callbackProviderId = storedProviderId
+ ? parseInt(storedProviderId, 10)
+ : null;
+ const providerResult = await loadProviderConfig(
+ callbackProviderId || undefined,
+ );
+ if (!providerResult) {
+ throw new LoginMethodError("OIDC not configured", 500);
+ }
+ const { config, providerType, providerDbId } = providerResult;
+ await settingsRepository.delete(`oidc_provider_${state}`);
+
+ // GitHub does not issue OIDC id_tokens; it has its own token exchange.
+ if (providerType === "github") {
+ return await githubIdentity(
+ code,
+ state,
+ config,
+ providerDbId ?? null,
+ backendCallbackUri,
+ frontendOrigin,
+ rememberMe,
+ );
+ }
+
+ const caCert = config.ca_cert;
+ const fetchOptions = buildFetchOptions(caCert);
+ const tokenResponse = await fetch(config.token_url, {
+ method: "POST",
+ headers: {
+ "Content-Type": "application/x-www-form-urlencoded",
+ Accept: "application/json",
+ },
+ body: new URLSearchParams({
+ grant_type: "authorization_code",
+ client_id: config.client_id,
+ client_secret: config.client_secret,
+ code,
+ redirect_uri: backendCallbackUri,
+ ...(codeVerifier ? { code_verifier: codeVerifier } : {}),
+ }),
+ ...fetchOptions,
+ });
+
+ if (!tokenResponse.ok) {
+ const errorText = await tokenResponse.text();
+ authLogger.error("OIDC token exchange failed", {
+ operation: "oidc_token_exchange_failed",
+ status: tokenResponse.status,
+ statusText: tokenResponse.statusText,
+ backendCallbackUri,
+ frontendOrigin,
+ errorResponse: errorText,
+ });
+ throw new LoginMethodError("Failed to exchange authorization code", 400);
+ }
+
+ const tokenData = (await tokenResponse.json()) as Record;
+ await deleteOIDCStateSettings(state);
+
+ let userInfo: Record | null = null;
+ const claimSources: Record[] = [];
+ const userInfoUrls: string[] = [];
+
+ const normalizedIssuerUrl = config.issuer_url.endsWith("/")
+ ? config.issuer_url.slice(0, -1)
+ : config.issuer_url;
+ const baseUrl = normalizedIssuerUrl.replace(/\/application\/o\/[^/]+$/, "");
+
+ try {
+ const discoveryResponse = await fetch(
+ `${normalizedIssuerUrl}/.well-known/openid-configuration`,
+ fetchOptions,
+ );
+ if (discoveryResponse.ok) {
+ const discovery = (await discoveryResponse.json()) as Record<
+ string,
+ unknown
+ >;
+ if (discovery.userinfo_endpoint) {
+ userInfoUrls.push(discovery.userinfo_endpoint as string);
+ }
+ }
+ } catch (discoveryError) {
+ authLogger.error(`OIDC discovery failed: ${discoveryError}`);
+ }
+
+ if (config.userinfo_url) userInfoUrls.unshift(config.userinfo_url);
+ userInfoUrls.push(
+ `${baseUrl}/userinfo/`,
+ `${baseUrl}/userinfo`,
+ `${normalizedIssuerUrl}/userinfo/`,
+ `${normalizedIssuerUrl}/userinfo`,
+ `${baseUrl}/oauth2/userinfo/`,
+ `${baseUrl}/oauth2/userinfo`,
+ `${normalizedIssuerUrl}/oauth2/userinfo/`,
+ `${normalizedIssuerUrl}/oauth2/userinfo`,
+ );
+
+ if (tokenData.id_token) {
+ try {
+ userInfo = await verifyOIDCToken(
+ tokenData.id_token as string,
+ config.issuer_url,
+ config.client_id,
+ caCert,
+ );
+ if (userInfo.nonce !== storedNonce) {
+ authLogger.warn("OIDC ID token nonce mismatch", {
+ operation: "oidc_nonce_mismatch",
+ providerId: callbackProviderId,
+ });
+ throw new LoginMethodError("Invalid OIDC token nonce", 401);
+ }
+ claimSources.push(userInfo);
+ } catch (error) {
+ // A token that is not a JWS carries no claims we could trust; fall
+ // through to userinfo. Signature and claim failures still reject.
+ if (!(error instanceof OIDCTokenFormatError)) throw error;
+ userInfo = null;
+ authLogger.warn(
+ "OIDC ID token cannot be verified, falling back to userinfo endpoint",
+ {
+ operation: "oidc_id_token_unverifiable",
+ providerId: callbackProviderId,
+ reason: error.message,
+ },
+ );
+ }
+ }
+
+ if (tokenData.access_token) {
+ for (const userInfoUrl of userInfoUrls) {
+ try {
+ const response = await fetch(userInfoUrl, {
+ headers: { Authorization: `Bearer ${tokenData.access_token}` },
+ ...fetchOptions,
+ });
+ if (response.ok) {
+ const fetched = (await response.json()) as Record;
+ claimSources.push(fetched);
+ userInfo = { ...userInfo, ...fetched };
+ break;
+ }
+ authLogger.error(
+ `Userinfo endpoint ${userInfoUrl} failed with status: ${response.status}`,
+ );
+ } catch (error) {
+ authLogger.error(`Userinfo endpoint ${userInfoUrl} failed:`, error);
+ }
+ }
+ }
+
+ if (!userInfo) {
+ authLogger.error("Failed to get user information from all sources");
+ throw new LoginMethodError("Failed to get user information", 400);
+ }
+
+ const identifier = (getNestedValue(userInfo, config.identifier_path) ||
+ userInfo[config.identifier_path] ||
+ userInfo.sub ||
+ userInfo.email ||
+ userInfo.preferred_username) as string;
+ const name = (getNestedValue(userInfo, config.name_path) ||
+ userInfo[config.name_path] ||
+ userInfo.name ||
+ userInfo.given_name ||
+ identifier) as string;
+
+ if (!identifier) {
+ throw new LoginMethodError(
+ `User identifier not found at path: ${config.identifier_path}. Available fields: ${Object.keys(userInfo).join(", ")}`,
+ 400,
+ );
+ }
+
+ let isAdmin: boolean | undefined;
+ if (config.admin_group) {
+ const groups = extractOidcGroupsFromSources(
+ claimSources,
+ config.group_claim,
+ );
+ isAdmin = groups.includes(config.admin_group);
+ }
+
+ let roleSync: { desired: string[]; managed: string[] } | undefined;
+ try {
+ const roleMap = parseOidcRoleMap(
+ config.role_map ?? process.env.OIDC_ROLE_MAP,
+ );
+ if (roleMap.size > 0) {
+ const groups = extractOidcGroupsFromSources(
+ claimSources,
+ config.group_claim,
+ );
+ const { desired, managed } = resolveOidcMappedRoles(groups, roleMap);
+ roleSync = { desired: [...desired], managed: [...managed] };
+ }
+ } catch (roleMapError) {
+ authLogger.error("Failed to read the OIDC role map", roleMapError, {
+ operation: "oidc_role_map_sync_failed",
+ });
+ }
+
+ return {
+ kind: "external",
+ provider: String(providerDbId ?? LEGACY_OIDC_PROVIDER_ID),
+ subject: identifier,
+ email: (userInfo.email as string | undefined) ?? null,
+ name,
+ isAdmin,
+ allowedUsers: config.allowed_users ?? null,
+ legacyIdentifier: identifier,
+ ssoProviderId: providerDbId ?? null,
+ oidcSub: typeof userInfo.sub === "string" ? userInfo.sub : null,
+ oidcSid: typeof userInfo.sid === "string" ? userInfo.sid : null,
+ roleSync,
+ returnTo: frontendOrigin,
+ rememberMe,
+ };
+ } catch (error) {
+ if (error instanceof LoginMethodError) throw error;
+ authLogger.error("OIDC callback failed", error);
+ throw new RedirectLoginError(
+ "OIDC authentication failed",
+ frontendOrigin,
+ 500,
+ );
+ }
+}
diff --git a/src/backend/auth/legacy/totp-factor.ts b/src/backend/auth/legacy/totp-factor.ts
new file mode 100644
index 000000000..f7428a586
--- /dev/null
+++ b/src/backend/auth/legacy/totp-factor.ts
@@ -0,0 +1,128 @@
+/**
+ * TOTP as a second factor. Enrolment stays in the TOTP routes; this is the
+ * login half. Phase C moves both into the TOTP plugin.
+ */
+
+import speakeasy from "speakeasy";
+import { AuthManager } from "../../utils/auth-manager.js";
+import { FieldCrypto } from "../../utils/field-crypto.js";
+import { LazyFieldEncryption } from "../../utils/lazy-field-encryption.js";
+import {
+ createCurrentUserAuthRepository,
+ createCurrentUserRepository,
+} from "../../database/repositories/factory.js";
+import type { SecondFactor } from "../registry.js";
+
+export const TOTP_FACTOR_ID = "totp";
+
+/**
+ * Checks a backup code and burns it. Codes are stored encrypted under the
+ * user's data key when it was available at enrolment, so both forms are read.
+ */
+async function consumeBackupCode(
+ userId: string,
+ storedCodes: string | null,
+ code: string,
+ userDataKey: Buffer,
+): Promise {
+ if (!storedCodes) return false;
+ const raw = LazyFieldEncryption.safeGetFieldValue(
+ storedCodes,
+ userDataKey,
+ userId,
+ "totpBackupCodes",
+ );
+ let codes: unknown = [];
+ try {
+ codes = raw ? JSON.parse(raw) : [];
+ } catch {
+ codes = [];
+ }
+ if (!Array.isArray(codes)) return false;
+ const index = codes.indexOf(code);
+ if (index === -1) return false;
+
+ codes.splice(index, 1);
+ await createCurrentUserRepository().update(userId, {
+ totpBackupCodes: FieldCrypto.encryptField(
+ JSON.stringify(codes),
+ userDataKey,
+ userId,
+ "totpBackupCodes",
+ ),
+ });
+ return true;
+}
+
+export const totpSecondFactor: SecondFactor = {
+ id: TOTP_FACTOR_ID,
+ pluginId: "core",
+ labelKey: "auth.totpFactor",
+
+ isEnrolled: async (userId) => {
+ const user = await createCurrentUserRepository().findById(userId);
+ return !!user?.totpEnabled;
+ },
+
+ verify: async (userId, body) => {
+ const code = String(body.totp_code ?? body.code ?? "").trim();
+ if (!code) return false;
+
+ const user = await createCurrentUserRepository().findById(userId);
+ if (!user?.totpEnabled || !user.totpSecret) {
+ return { ok: false, error: "TOTP not enabled for this user" };
+ }
+
+ const userDataKey = AuthManager.getInstance().getUserDataKey(userId);
+ if (!userDataKey) {
+ return {
+ ok: false,
+ error: "Session expired - please log in again",
+ code: "SESSION_EXPIRED",
+ };
+ }
+
+ const secret = LazyFieldEncryption.safeGetFieldValue(
+ user.totpSecret,
+ userDataKey,
+ userId,
+ "totp_secret",
+ );
+ if (!secret) {
+ // The secret was encrypted under a key a password reset replaced.
+ await createCurrentUserRepository().update(userId, {
+ totpEnabled: false,
+ totpSecret: null,
+ totpBackupCodes: null,
+ });
+ await createCurrentUserAuthRepository().removeSecondFactor(
+ userId,
+ "core",
+ TOTP_FACTOR_ID,
+ );
+ return {
+ ok: false,
+ error:
+ "TOTP has been disabled due to password reset. Please set up TOTP again.",
+ };
+ }
+
+ const verified = speakeasy.totp.verify({
+ secret,
+ encoding: "base32",
+ token: code,
+ window: 2,
+ });
+ if (verified) return true;
+
+ return consumeBackupCode(userId, user.totpBackupCodes, code, userDataKey);
+ },
+
+ reset: async (userId) => {
+ await createCurrentUserRepository().update(userId, {
+ totpEnabled: false,
+ totpSecret: null,
+ totpBackupCodes: null,
+ });
+ },
+};
diff --git a/src/backend/auth/login-pipeline.ts b/src/backend/auth/login-pipeline.ts
new file mode 100644
index 000000000..677b00bb9
--- /dev/null
+++ b/src/backend/auth/login-pipeline.ts
@@ -0,0 +1,564 @@
+/**
+ * Every login runs through here:
+ *
+ * method -> verified identity -> find or provision the user -> unlock the
+ * data key -> second factors (fail closed) -> session
+ *
+ * A method never mints a session. It says who the user is and core does the
+ * rest, so password, passkey, OIDC, LDAP and any plugin method get the same
+ * second factors, the same cookie and the same audit line.
+ */
+
+import crypto from "crypto";
+import type { Request, Response } from "express";
+import { AuthManager } from "../utils/auth-manager.js";
+import { loginRateLimiter } from "../utils/login-rate-limiter.js";
+import { authLogger } from "../utils/logger.js";
+import {
+ generateDeviceFingerprint,
+ getDeviceId,
+ parseUserAgent,
+} from "../utils/user-agent-parser.js";
+import { logAudit, getRequestMeta } from "../utils/audit-logger.js";
+import {
+ createCurrentUserAuthRepository,
+ createCurrentUserRepository,
+} from "../database/repositories/factory.js";
+import type { UserRecord } from "../database/repositories/user-repository.js";
+import { ensureCoreLoginProviders } from "./core-auth.js";
+import { findOrProvisionExternalUser } from "./provisioning.js";
+import {
+ getSecondFactor,
+ listSecondFactors,
+ type SecondFactor,
+} from "./registry.js";
+import {
+ issueSession,
+ sendSession,
+ syncSharedCredentialsForUserRoles,
+} from "./session-issuer.js";
+import {
+ LoginMethodError,
+ type PendingLogin,
+ type VerifiedIdentity,
+} from "./types.js";
+
+const PENDING_TTL_MS = 10 * 60 * 1000;
+export const PENDING_LOGIN_COOKIE = "termix_pending_login";
+
+const pendingLogins = new Map();
+
+function prunePending(now = Date.now()): void {
+ for (const [key, pending] of pendingLogins) {
+ if (now - pending.createdAt > PENDING_TTL_MS) pendingLogins.delete(key);
+ }
+}
+
+function pendingKey(token: string): string {
+ return crypto.createHash("sha256").update(token).digest("hex");
+}
+
+/** Test helper. */
+export function resetPendingLoginsForTests(): void {
+ pendingLogins.clear();
+}
+
+export interface SecondFactorState {
+ /** Factors the user must pass, all with an active provider. */
+ required: SecondFactor[];
+ /** Enrolled in a factor whose plugin is disabled or missing. */
+ blocked: { pluginId: string; factorId: string }[];
+}
+
+/**
+ * Which second factors apply to a user. A factor recorded in
+ * user_second_factors whose plugin is not running blocks the login: skipping
+ * it would turn "disable the plugin" into "remove everyone's 2FA".
+ */
+export async function evaluateSecondFactors(
+ userId: string,
+): Promise {
+ ensureCoreLoginProviders();
+ const rows =
+ await createCurrentUserAuthRepository().listSecondFactors(userId);
+ const required = new Map();
+ const blocked: SecondFactorState["blocked"] = [];
+
+ for (const row of rows) {
+ const factor = getSecondFactor(row.pluginId, row.factorId);
+ if (!factor) {
+ blocked.push({ pluginId: row.pluginId, factorId: row.factorId });
+ continue;
+ }
+ required.set(`${factor.pluginId}:${factor.id}`, factor);
+ }
+
+ // A factor can also report enrolment itself, for data from before
+ // user_second_factors existed.
+ for (const factor of listSecondFactors()) {
+ const key = `${factor.pluginId}:${factor.id}`;
+ if (required.has(key)) continue;
+ try {
+ if (await factor.isEnrolled(userId)) required.set(key, factor);
+ } catch (error) {
+ authLogger.warn("Second factor enrolment check failed", {
+ operation: "second_factor_enrolment_check",
+ factorId: factor.id,
+ error,
+ });
+ }
+ }
+
+ return { required: [...required.values()], blocked };
+}
+
+async function isTrustedDevice(req: Request, userId: string): Promise {
+ const deviceInfo = parseUserAgent(req);
+ const fingerprint = generateDeviceFingerprint(deviceInfo, getDeviceId(req));
+ if (!fingerprint) return false;
+ const trusted = await AuthManager.getInstance().isTrustedDevice(
+ userId,
+ fingerprint,
+ );
+ if (trusted) {
+ authLogger.info("Second factor bypassed for trusted device", {
+ operation: "totp_bypass",
+ userId,
+ deviceFingerprint: fingerprint,
+ });
+ }
+ return trusted;
+}
+
+type DeviceType = ReturnType["type"];
+
+async function resolveUser(
+ identity: VerifiedIdentity,
+ deviceType: DeviceType,
+): Promise {
+ if (identity.kind === "external") {
+ return findOrProvisionExternalUser(identity, deviceType);
+ }
+ const user = await createCurrentUserRepository().findById(identity.userId);
+ if (!user)
+ throw new LoginMethodError("User not found", 404, "user_not_found");
+ return user;
+}
+
+/**
+ * Unlocks the user's data key. A password login migrates and opens the key
+ * with the password; everything else uses the server-held wrapping.
+ */
+async function unlockUser(
+ user: UserRecord,
+ identity: VerifiedIdentity,
+ deviceType: DeviceType,
+): Promise {
+ const authManager = AuthManager.getInstance();
+
+ if (identity.kind === "external" || user.isOidc) {
+ try {
+ await authManager.authenticateOIDCUser(user.id, deviceType);
+ } catch (error) {
+ authLogger.error("Failed to set up external user encryption", error, {
+ operation: "external_user_encryption_setup_failed",
+ userId: user.id,
+ });
+ }
+ return;
+ }
+
+ const ok = identity.password
+ ? await authManager.authenticateUser(user.id, identity.password, deviceType)
+ : await authManager.authenticateWebAuthnUser(user.id, deviceType);
+ if (!ok) {
+ throw new LoginMethodError(
+ identity.password
+ ? "Incorrect password"
+ : (identity.unlockError ?? "This account could not be unlocked"),
+ 401,
+ "unlock_failed",
+ );
+ }
+}
+
+export interface LoginContext {
+ methodId: string;
+ rememberMe: boolean;
+ /** Username the rate limiter counted, cleared on success. */
+ rateLimitUsername?: string;
+}
+
+export type LoginResult =
+ | {
+ kind: "session";
+ token: string;
+ maxAge: number;
+ body: Record;
+ }
+ | {
+ kind: "second-factor";
+ tempToken: string;
+ factors: Array<{ id: string; pluginId: string; labelKey: string }>;
+ rememberMe: boolean;
+ };
+
+/**
+ * Takes a verified identity to either a session or a second-factor step.
+ * Throws LoginMethodError for anything the user should be told.
+ */
+export async function runLogin(
+ req: Request,
+ identity: VerifiedIdentity,
+ context: LoginContext,
+): Promise {
+ const deviceType = parseUserAgent(req).type;
+ const user = await resolveUser(identity, deviceType);
+
+ await unlockUser(user, identity, deviceType);
+ await syncSharedCredentialsForUserRoles(
+ user.id,
+ `${context.methodId}_role_shared_credentials`,
+ );
+
+ const factors = await evaluateSecondFactors(user.id);
+ if (factors.blocked.length > 0) {
+ authLogger.warn("Login refused: an enrolled second factor is unavailable", {
+ operation: "second_factor_unavailable",
+ userId: user.id,
+ factors: factors.blocked,
+ });
+ const { ipAddress, userAgent } = getRequestMeta(req);
+ await logAudit({
+ userId: user.id,
+ username: user.username,
+ action: "login_blocked_second_factor",
+ resourceType: "session",
+ details: JSON.stringify({ unavailable: factors.blocked }),
+ ipAddress,
+ userAgent,
+ success: false,
+ errorMessage: "Enrolled second factor unavailable",
+ });
+ throw new LoginMethodError(
+ "Your account uses a second factor that is not available right now. Contact an admin to reset it.",
+ 403,
+ "second_factor_unavailable",
+ );
+ }
+
+ const ssoClaims = {
+ ssoProviderId: identity.ssoProviderId ?? null,
+ oidcSub: identity.oidcSub ?? null,
+ oidcSid: identity.oidcSid ?? null,
+ };
+
+ if (
+ factors.required.length > 0 &&
+ !identity.mfaSatisfied &&
+ !(await isTrustedDevice(req, user.id))
+ ) {
+ const tempToken = await AuthManager.getInstance().generateJWTToken(
+ user.id,
+ { pendingTOTP: true, expiresIn: "10m" },
+ );
+ prunePending();
+ pendingLogins.set(pendingKey(tempToken), {
+ userId: user.id,
+ methodId: context.methodId,
+ rememberMe: context.rememberMe,
+ ...ssoClaims,
+ createdAt: Date.now(),
+ });
+ return {
+ kind: "second-factor",
+ tempToken,
+ rememberMe: context.rememberMe,
+ factors: factors.required.map((factor) => ({
+ id: factor.id,
+ pluginId: factor.pluginId,
+ labelKey: factor.labelKey,
+ })),
+ };
+ }
+
+ const session = await issueSession(req, user, {
+ methodId: context.methodId,
+ rememberMe: context.rememberMe,
+ rateLimitUsername: context.rateLimitUsername ?? identity.rateLimitUsername,
+ longLivedForApps: identity.kind === "external",
+ ...ssoClaims,
+ });
+ return { kind: "session", ...session };
+}
+
+/** JSON form of a login result, the shape the login screen expects. */
+export function secondFactorBody(
+ result: Extract,
+): Record {
+ return {
+ success: true,
+ requires_totp: true,
+ requires_second_factor: true,
+ temp_token: result.tempToken,
+ rememberMe: result.rememberMe,
+ second_factors: result.factors,
+ };
+}
+
+/** Runs a form login and writes the response. */
+export async function respondWithLogin(
+ req: Request,
+ res: Response,
+ identity: VerifiedIdentity,
+ context: LoginContext,
+): Promise {
+ const result = await runLogin(req, identity, context);
+ if (result.kind === "second-factor") {
+ return res.json(secondFactorBody(result));
+ }
+ return sendSession(req, res, result);
+}
+
+export function sendLoginError(res: Response, error: unknown): Response {
+ if (error instanceof LoginMethodError) {
+ const remainingTime = (error as { remainingTime?: number }).remainingTime;
+ return res.status(error.status).json({
+ error: error.message,
+ ...(error.code ? { code: error.code } : {}),
+ ...(remainingTime !== undefined ? { remainingTime } : {}),
+ });
+ }
+ authLogger.error("Login failed", error);
+ return res.status(500).json({ error: "Login failed" });
+}
+
+export interface PendingLoginLookup {
+ userId: string;
+ token: string;
+ pending: PendingLogin | null;
+}
+
+/** Checks a pending token from the body or the redirect cookie. */
+export async function readPendingLogin(
+ req: Request,
+): Promise {
+ const token =
+ (typeof req.body?.temp_token === "string" && req.body.temp_token) ||
+ (req.cookies?.[PENDING_LOGIN_COOKIE] as string | undefined);
+ if (!token) return null;
+ const decoded = await AuthManager.getInstance().verifyJWTToken(token);
+ if (!decoded || !decoded.pendingTOTP) return null;
+ prunePending();
+ const pending = pendingLogins.get(pendingKey(token)) ?? null;
+ return { userId: decoded.userId, token, pending };
+}
+
+export function consumePendingLogin(token: string): void {
+ pendingLogins.delete(pendingKey(token));
+}
+
+/**
+ * Finishes a login that stopped for a second factor. The pending token comes
+ * from the body, or from the cookie a redirect method set.
+ */
+export async function verifySecondFactorAndRespond(
+ req: Request,
+ res: Response,
+ factorId: string,
+): Promise {
+ const lookup = await readPendingLogin(req);
+ if (!lookup) {
+ return res.status(401).json({ error: "Invalid temporary token" });
+ }
+
+ const user = await createCurrentUserRepository().findById(lookup.userId);
+ if (!user) return res.status(404).json({ error: "User not found" });
+
+ const lockStatus = loginRateLimiter.isTOTPLocked(user.id);
+ if (lockStatus.locked) {
+ authLogger.warn("Second factor blocked due to rate limiting", {
+ operation: "totp_verify_blocked",
+ userId: user.id,
+ remainingTime: lockStatus.remainingTime,
+ });
+ return res.status(429).json({
+ error: `Rate limited: Too many TOTP verification attempts. Please wait ${lockStatus.remainingTime} seconds before trying again.`,
+ remainingTime: lockStatus.remainingTime,
+ code: "TOTP_RATE_LIMITED",
+ });
+ }
+ loginRateLimiter.recordFailedTOTPAttempt(user.id);
+
+ const factors = await evaluateSecondFactors(user.id);
+ if (factors.blocked.length > 0) {
+ return res.status(403).json({
+ error:
+ "Your account uses a second factor that is not available right now. Contact an admin to reset it.",
+ code: "second_factor_unavailable",
+ });
+ }
+ const factor = factors.required.find(
+ (candidate) => candidate.id === factorId,
+ );
+ if (!factor) {
+ return res
+ .status(400)
+ .json({ error: "That second factor is not enabled for this user" });
+ }
+
+ const result = await factor.verify(user.id, req.body ?? {});
+ if (result !== true) {
+ if (result && typeof result === "object") {
+ return res.status(result.code === "SESSION_EXPIRED" ? 401 : 400).json({
+ error: result.error,
+ ...(result.code ? { code: result.code } : {}),
+ });
+ }
+ authLogger.warn("Second factor verification failed", {
+ operation: "totp_verify_failed",
+ userId: user.id,
+ factorId,
+ });
+ const { ipAddress, userAgent } = getRequestMeta(req);
+ await logAudit({
+ userId: user.id,
+ username: user.username,
+ action: "login_second_factor_failed",
+ resourceType: "session",
+ details: JSON.stringify({ factor: factorId }),
+ ipAddress,
+ userAgent,
+ success: false,
+ });
+ return res.status(401).json({
+ error: "Invalid TOTP code",
+ remainingAttempts: loginRateLimiter.getRemainingTOTPAttempts(user.id),
+ });
+ }
+ loginRateLimiter.resetTOTPAttempts(user.id);
+
+ const rememberMe =
+ typeof req.body?.rememberMe === "boolean"
+ ? req.body.rememberMe
+ : (lookup.pending?.rememberMe ?? false);
+
+ if (rememberMe) {
+ const deviceInfo = parseUserAgent(req);
+ const fingerprint = generateDeviceFingerprint(deviceInfo, getDeviceId(req));
+ if (fingerprint) {
+ await AuthManager.getInstance().addTrustedDevice(
+ user.id,
+ fingerprint,
+ deviceInfo.type,
+ deviceInfo.deviceInfo,
+ );
+ authLogger.info("Device automatically trusted via Remember Me", {
+ operation: "totp_auto_trust",
+ userId: user.id,
+ deviceType: deviceInfo.type,
+ });
+ }
+ }
+
+ const pending = lookup.pending;
+ const session = await issueSession(req, user, {
+ methodId: pending?.methodId ?? "password",
+ rememberMe,
+ ssoProviderId: pending?.ssoProviderId ?? null,
+ oidcSub: pending?.oidcSub ?? null,
+ oidcSid: pending?.oidcSid ?? null,
+ });
+
+ consumePendingLogin(lookup.token);
+ res.clearCookie(
+ PENDING_LOGIN_COOKIE,
+ AuthManager.getInstance().getClearCookieOptions(req),
+ );
+ return sendSession(req, res, session);
+}
+
+/**
+ * Finishes a redirect login (OIDC and friends): back to where the browser
+ * came from, with a cookie, or with the token in the URL for the desktop and
+ * mobile app callbacks that cannot read one.
+ */
+export async function respondWithRedirectLogin(
+ req: Request,
+ res: Response,
+ identity: VerifiedIdentity,
+ context: LoginContext,
+ isTokenCallback: (url: string) => boolean,
+): Promise {
+ const returnTo = identity.returnTo;
+ if (!returnTo) {
+ res.status(500).json({ error: "Login method did not say where to return" });
+ return;
+ }
+ const authManager = AuthManager.getInstance();
+
+ let result: LoginResult;
+ try {
+ result = await runLogin(req, identity, context);
+ } catch (error) {
+ redirectWithLoginError(res, returnTo, error);
+ return;
+ }
+
+ const url = new URL(returnTo);
+ const tokenCallback = isTokenCallback(returnTo);
+ res.clearCookie("jwt", authManager.getClearCookieOptions(req));
+
+ if (result.kind === "second-factor") {
+ url.searchParams.set("second_factor", "1");
+ url.searchParams.set(
+ "second_factors",
+ result.factors.map((factor) => factor.id).join(","),
+ );
+ if (tokenCallback) {
+ url.searchParams.set("temp_token", result.tempToken);
+ res.redirect(url.toString());
+ return;
+ }
+ res
+ .cookie(
+ PENDING_LOGIN_COOKIE,
+ result.tempToken,
+ authManager.getSecureCookieOptions(req, PENDING_TTL_MS),
+ )
+ .redirect(url.toString());
+ return;
+ }
+
+ url.searchParams.set("success", "true");
+ if (tokenCallback) {
+ url.searchParams.set("token", result.token);
+ res.redirect(url.toString());
+ return;
+ }
+ res
+ .cookie(
+ "jwt",
+ result.token,
+ authManager.getSecureCookieOptions(req, result.maxAge),
+ )
+ .redirect(url.toString());
+}
+
+export function redirectWithLoginError(
+ res: Response,
+ returnTo: string,
+ error: unknown,
+): void {
+ if (!(error instanceof LoginMethodError)) {
+ authLogger.error("Redirect login failed", error);
+ }
+ const url = new URL(returnTo);
+ url.searchParams.set(
+ "error",
+ error instanceof LoginMethodError
+ ? (error.code ?? error.message)
+ : "OIDC authentication failed",
+ );
+ res.redirect(url.toString());
+}
diff --git a/src/backend/auth/provisioning.ts b/src/backend/auth/provisioning.ts
new file mode 100644
index 000000000..ae698ab6a
--- /dev/null
+++ b/src/backend/auth/provisioning.ts
@@ -0,0 +1,329 @@
+/**
+ * Finds or creates the user behind an external sign-in (OIDC, LDAP, a
+ * plugin's provider). The rules used to be copied into every SSO route; they
+ * live here once so every login method gets the same ones:
+ *
+ * - the allowed-users list is checked on every sign-in, new user or not
+ * - the first user ever becomes admin and skips the list
+ * - anyone else is only created when SSO auto-provisioning is on
+ * - an admin group, when the provider reports one, keeps admin in step
+ * - a mapped role set, when the provider reports one, keeps roles in step
+ */
+
+import { nanoid } from "nanoid";
+import { authLogger } from "../utils/logger.js";
+import { AuthManager } from "../utils/auth-manager.js";
+import { DatabaseSaveTrigger } from "../utils/database-save-trigger.js";
+import { PermissionManager } from "../utils/permission-manager.js";
+import {
+ createCurrentRoleRepository,
+ createCurrentSettingsRepository,
+ createCurrentUserAuthRepository,
+ createCurrentUserRepository,
+} from "../database/repositories/factory.js";
+import type { UserRecord } from "../database/repositories/user-repository.js";
+import { isOIDCUserAllowed } from "../database/routes/user-oidc-utils.js";
+import { LoginMethodError, type VerifiedIdentity } from "./types.js";
+
+type ExternalIdentity = Extract;
+
+const THIRTY_DAYS_MS = 30 * 24 * 60 * 60 * 1000;
+const ONE_DAY_MS = 24 * 60 * 60 * 1000;
+
+/** SSO auto-provisioning: the admin setting, or OIDC_ALLOW_REGISTRATION. */
+export async function isExternalProvisioningAllowed(): Promise {
+ try {
+ if (
+ await createCurrentSettingsRepository().getBoolean(
+ "oidc_auto_provision",
+ false,
+ )
+ ) {
+ return true;
+ }
+ } catch {
+ // fall through to the environment
+ }
+ return (
+ (process.env.OIDC_ALLOW_REGISTRATION || "").trim().toLowerCase() === "true"
+ );
+}
+
+/**
+ * Whether a newly provisioned user must wait for an admin. There is no
+ * approval queue yet, so nobody does; a plugin or a later release can change
+ * that here without touching any login method.
+ */
+export async function isApprovalRequired(
+ _identity: ExternalIdentity,
+): Promise {
+ return false;
+}
+
+function isAllowed(identity: ExternalIdentity): boolean {
+ if (!identity.allowedUsers) return true;
+ const email = identity.email ?? undefined;
+ return (
+ isOIDCUserAllowed(identity.allowedUsers, identity.subject, email) ||
+ (!!identity.legacyIdentifier &&
+ isOIDCUserAllowed(
+ identity.allowedUsers,
+ identity.legacyIdentifier,
+ email,
+ ))
+ );
+}
+
+async function syncAdmin(
+ user: UserRecord,
+ isAdmin: boolean,
+): Promise {
+ if (!!user.isAdmin === isAdmin) return user;
+ const updated =
+ (await createCurrentUserRepository().update(user.id, { isAdmin })) ?? user;
+ try {
+ await createCurrentRoleRepository().switchUserRoleName({
+ userId: user.id,
+ addRoleName: isAdmin ? "admin" : "user",
+ removeRoleName: isAdmin ? "user" : "admin",
+ grantedBy: user.id,
+ });
+ } catch {
+ // Roles follow on the next sign-in; the admin flag itself is saved.
+ }
+ authLogger.info("Admin status synced from the identity provider", {
+ operation: "external_admin_sync",
+ userId: user.id,
+ isAdmin,
+ });
+ return updated;
+}
+
+/**
+ * Adds and removes the roles a provider's group map manages. Roles assigned
+ * by hand, and roles outside the map, are never touched.
+ */
+export async function applyRoleSync(
+ userId: string,
+ roleSync: { desired: string[]; managed: string[] },
+): Promise {
+ const desired = new Set(roleSync.desired);
+ const managed = new Set(roleSync.managed);
+ const roleRepository = createCurrentRoleRepository();
+ const currentRoles = await roleRepository.listUserRoles(userId);
+ const currentNames = new Set(currentRoles.map((role) => role.roleName));
+
+ const toAdd = [...desired].filter((name) => !currentNames.has(name));
+ const toRemove = currentRoles.filter(
+ (role) => managed.has(role.roleName) && !desired.has(role.roleName),
+ );
+
+ for (const roleName of toAdd) {
+ const assigned = await roleRepository.assignRoleNameToUser({
+ userId,
+ roleName,
+ grantedBy: userId,
+ });
+ if (!assigned) {
+ authLogger.warn("Role map references a role that does not exist", {
+ operation: "external_role_map_missing_role",
+ userId,
+ roleName,
+ });
+ }
+ }
+ for (const role of toRemove) {
+ await roleRepository.removeRoleFromUser(userId, role.roleId);
+ }
+
+ if (toAdd.length > 0 || toRemove.length > 0) {
+ authLogger.info("Roles synced from provider group membership", {
+ operation: "external_role_map_sync",
+ userId,
+ added: toAdd,
+ removed: toRemove.map((role) => role.roleName),
+ });
+ PermissionManager.getInstance().invalidateUserPermissionCache(userId);
+ }
+}
+
+async function findLinkedUser(
+ identity: ExternalIdentity,
+): Promise {
+ const identities = createCurrentUserAuthRepository();
+ const users = createCurrentUserRepository();
+
+ const linked = await identities.findIdentity(
+ identity.provider,
+ identity.subject,
+ );
+ if (linked) {
+ const user = await users.findById(linked.userId);
+ if (user) return user;
+ }
+
+ // Accounts from before user_external_identities matched on the raw
+ // identifier column; link them the first time they sign in.
+ if (identity.legacyIdentifier) {
+ const legacy = await users.findByOidcIdentifier(identity.legacyIdentifier);
+ if (legacy) {
+ await identities.linkIdentity({
+ userId: legacy.id,
+ providerId: identity.provider,
+ subject: identity.subject,
+ email: identity.email,
+ });
+ return legacy;
+ }
+ }
+ return null;
+}
+
+async function createUser(
+ identity: ExternalIdentity,
+ deviceType: string,
+): Promise {
+ const users = createCurrentUserRepository();
+ const id = nanoid();
+ const created = await users.createFirstSsoUser({
+ id,
+ username: identity.name || identity.subject,
+ passwordHash: "",
+ isAdmin: !!identity.isAdmin,
+ isOidc: true,
+ oidcIdentifier:
+ identity.legacyIdentifier ?? `${identity.provider}:${identity.subject}`,
+ ssoProviderId: identity.ssoProviderId ?? null,
+ });
+
+ try {
+ const assigned = await createCurrentRoleRepository().assignRoleNameToUser({
+ userId: id,
+ roleName: created.user.isAdmin ? "admin" : "user",
+ grantedBy: id,
+ });
+ if (!assigned) {
+ authLogger.warn("Default role not found for a provisioned user", {
+ operation: "external_default_role",
+ userId: id,
+ });
+ }
+ } catch (roleError) {
+ authLogger.error("Failed to assign a default role", roleError, {
+ operation: "external_default_role",
+ userId: id,
+ });
+ }
+
+ try {
+ const sessionDurationMs =
+ deviceType === "desktop" || deviceType === "mobile"
+ ? THIRTY_DAYS_MS
+ : ONE_DAY_MS;
+ await AuthManager.getInstance().registerOIDCUser(id, sessionDurationMs);
+ } catch (encryptionError) {
+ await users.delete(id);
+ authLogger.error(
+ "Failed to set up a provisioned user's encryption, user removed",
+ encryptionError,
+ { operation: "external_user_create_failed", userId: id },
+ );
+ throw new LoginMethodError(
+ "Failed to setup user security - user creation cancelled",
+ 500,
+ "setup_failed",
+ );
+ }
+
+ await createCurrentUserAuthRepository().linkIdentity({
+ userId: id,
+ providerId: identity.provider,
+ subject: identity.subject,
+ email: identity.email,
+ });
+
+ try {
+ await DatabaseSaveTrigger.forceSave("external_user_create");
+ } catch (saveError) {
+ authLogger.error("Failed to persist a provisioned user", saveError, {
+ operation: "external_user_create_save_failed",
+ userId: id,
+ });
+ }
+
+ return created.user;
+}
+
+export async function findOrProvisionExternalUser(
+ identity: ExternalIdentity,
+ deviceType: string,
+): Promise {
+ let user = await findLinkedUser(identity);
+
+ if (!user) {
+ const isFirstUser = (await createCurrentUserRepository().countAll()) === 0;
+ if (!isFirstUser) {
+ if (!isAllowed(identity)) {
+ authLogger.warn("External user not in the allowed list", {
+ operation: "external_user_not_allowed",
+ provider: identity.provider,
+ });
+ throw new LoginMethodError("User not allowed", 403, "user_not_allowed");
+ }
+ if (!(await isExternalProvisioningAllowed())) {
+ authLogger.warn("External sign-in refused, provisioning is off", {
+ operation: "external_registration_disabled",
+ provider: identity.provider,
+ });
+ throw new LoginMethodError(
+ "Registration is disabled",
+ 403,
+ "registration_disabled",
+ );
+ }
+ if (await isApprovalRequired(identity)) {
+ throw new LoginMethodError(
+ "Your account is waiting for an admin to approve it",
+ 403,
+ "approval_required",
+ );
+ }
+ }
+ user = await createUser(identity, deviceType);
+ } else {
+ if (!isAllowed(identity)) {
+ authLogger.warn("External user not in the allowed list", {
+ operation: "external_user_not_allowed_existing",
+ provider: identity.provider,
+ userId: user.id,
+ });
+ throw new LoginMethodError("User not allowed", 403, "user_not_allowed");
+ }
+
+ // A user who also has a password picked their own username; leave it.
+ const isDualAuth = !!user.passwordHash && user.passwordHash.trim() !== "";
+ if (!isDualAuth && identity.name && user.username !== identity.name) {
+ user =
+ (await createCurrentUserRepository().update(user.id, {
+ username: identity.name,
+ })) ?? user;
+ }
+
+ if (identity.isAdmin !== undefined) {
+ user = await syncAdmin(user, identity.isAdmin);
+ }
+ }
+
+ if (identity.roleSync) {
+ try {
+ await applyRoleSync(user.id, identity.roleSync);
+ } catch (roleSyncError) {
+ authLogger.error("Failed to sync roles from provider", roleSyncError, {
+ operation: "external_role_map_sync_failed",
+ userId: user.id,
+ });
+ }
+ }
+
+ return user;
+}
diff --git a/src/backend/auth/registry.ts b/src/backend/auth/registry.ts
new file mode 100644
index 000000000..1a9fe371e
--- /dev/null
+++ b/src/backend/auth/registry.ts
@@ -0,0 +1,69 @@
+/**
+ * Login methods and second factors, from core and from plugins.
+ *
+ * Password login is registered by core and always present. Everything else
+ * (OIDC, LDAP, passkeys, TOTP, ...) registers here, from a plugin through
+ * ctx.auth or, in 2.9.0, from legacy-providers.ts.
+ */
+
+import type {
+ PluginLoginMethod,
+ PluginSecondFactor,
+} from "@termix/plugin-sdk/backend";
+
+export type LoginMethod = PluginLoginMethod & { pluginId: string };
+export type SecondFactor = PluginSecondFactor & { pluginId: string };
+
+const loginMethods = new Map();
+const secondFactors = new Map();
+
+function register(
+ map: Map,
+ kind: string,
+ entry: T,
+): () => void {
+ const existing = map.get(entry.id);
+ if (existing && existing.pluginId !== entry.pluginId) {
+ throw new Error(
+ `${kind} "${entry.id}" is already provided by ${existing.pluginId}`,
+ );
+ }
+ map.set(entry.id, entry);
+ return () => {
+ if (map.get(entry.id) === entry) map.delete(entry.id);
+ };
+}
+
+export function registerLoginMethod(method: LoginMethod): () => void {
+ return register(loginMethods, "Login method", method);
+}
+
+export function getLoginMethod(id: string): LoginMethod | undefined {
+ return loginMethods.get(id);
+}
+
+export function listLoginMethods(): LoginMethod[] {
+ return [...loginMethods.values()];
+}
+
+export function registerSecondFactor(factor: SecondFactor): () => void {
+ return register(secondFactors, "Second factor", factor);
+}
+
+export function getSecondFactor(
+ pluginId: string,
+ factorId: string,
+): SecondFactor | undefined {
+ const factor = secondFactors.get(factorId);
+ return factor && factor.pluginId === pluginId ? factor : undefined;
+}
+
+export function listSecondFactors(): SecondFactor[] {
+ return [...secondFactors.values()];
+}
+
+/** Test helper. */
+export function resetAuthRegistryForTests(): void {
+ loginMethods.clear();
+ secondFactors.clear();
+}
diff --git a/src/backend/auth/second-factor-admin.ts b/src/backend/auth/second-factor-admin.ts
new file mode 100644
index 000000000..dd39de3b6
--- /dev/null
+++ b/src/backend/auth/second-factor-admin.ts
@@ -0,0 +1,86 @@
+/**
+ * Admin view and reset of a user's second factors. Covers factors whose
+ * plugin is disabled or gone, which is exactly when a user gets locked out
+ * and an admin has to step in.
+ */
+
+import {
+ createCurrentTrustedDeviceRepository,
+ createCurrentUserAuthRepository,
+} from "../database/repositories/factory.js";
+import { authLogger } from "../utils/logger.js";
+import { ensureCoreLoginProviders } from "./core-auth.js";
+import { getSecondFactor, listSecondFactors } from "./registry.js";
+
+export interface UserSecondFactorSummary {
+ pluginId: string;
+ factorId: string;
+ labelKey: string | null;
+ /** False when the plugin behind it is not running. */
+ available: boolean;
+}
+
+export async function listUserSecondFactors(
+ userId: string,
+): Promise {
+ ensureCoreLoginProviders();
+ const rows =
+ await createCurrentUserAuthRepository().listSecondFactors(userId);
+ const summaries: UserSecondFactorSummary[] = rows.map((row) => {
+ const factor = getSecondFactor(row.pluginId, row.factorId);
+ return {
+ pluginId: row.pluginId,
+ factorId: row.factorId,
+ labelKey: factor?.labelKey ?? null,
+ available: !!factor,
+ };
+ });
+
+ for (const factor of listSecondFactors()) {
+ if (
+ summaries.some(
+ (summary) =>
+ summary.pluginId === factor.pluginId &&
+ summary.factorId === factor.id,
+ )
+ ) {
+ continue;
+ }
+ if (await factor.isEnrolled(userId).catch(() => false)) {
+ summaries.push({
+ pluginId: factor.pluginId,
+ factorId: factor.id,
+ labelKey: factor.labelKey,
+ available: true,
+ });
+ }
+ }
+ return summaries;
+}
+
+/**
+ * Removes every factor: runs each running factor's own reset (so TOTP clears
+ * its secret), drops the enrolment rows including orphaned ones, and forgets
+ * trusted devices so an old "remember me" cannot skip the new factor.
+ */
+export async function resetUserSecondFactors(
+ userId: string,
+): Promise> {
+ const factors = await listUserSecondFactors(userId);
+ for (const summary of factors) {
+ const factor = getSecondFactor(summary.pluginId, summary.factorId);
+ if (!factor?.reset) continue;
+ try {
+ await factor.reset(userId);
+ } catch (error) {
+ authLogger.error("Second factor reset failed", error, {
+ operation: "admin_reset_second_factor",
+ userId,
+ factorId: summary.factorId,
+ });
+ }
+ }
+ await createCurrentUserAuthRepository().clearSecondFactors(userId);
+ await createCurrentTrustedDeviceRepository().deleteByUserId(userId);
+ return factors.map(({ pluginId, factorId }) => ({ pluginId, factorId }));
+}
diff --git a/src/backend/auth/session-issuer.ts b/src/backend/auth/session-issuer.ts
new file mode 100644
index 000000000..222cee919
--- /dev/null
+++ b/src/backend/auth/session-issuer.ts
@@ -0,0 +1,162 @@
+/**
+ * The one place a login becomes a session: JWT, cookie, response body,
+ * audit line and the automation event. Every login method ends here, so
+ * they all behave the same way.
+ */
+
+import type { Request, Response } from "express";
+import { AuthManager } from "../utils/auth-manager.js";
+import { authLogger } from "../utils/logger.js";
+import { loginRateLimiter } from "../utils/login-rate-limiter.js";
+import { logAudit, getRequestMeta } from "../utils/audit-logger.js";
+import { parseUserAgent } from "../utils/user-agent-parser.js";
+import { notifyAutomationInternalEvent } from "../hosts/automation-events.js";
+import { createCurrentSettingsRepository } from "../database/repositories/factory.js";
+import type { UserRecord } from "../database/repositories/user-repository.js";
+
+const THIRTY_DAYS_MS = 30 * 24 * 60 * 60 * 1000;
+
+export function isNativeAppRequest(req: Request): boolean {
+ return (
+ (req.get("User-Agent") || "").startsWith("Termix-Mobile/") ||
+ req.get("X-Electron-App") === "true"
+ );
+}
+
+/** Cookie lifetime: 30 days when remembered, else session_timeout_hours. */
+export async function sessionCookieMaxAge(
+ rememberMe: boolean,
+): Promise {
+ if (rememberMe) return THIRTY_DAYS_MS;
+ const value = await createCurrentSettingsRepository().get(
+ "session_timeout_hours",
+ );
+ const hours = value ? parseInt(value, 10) || 24 : 24;
+ return hours * 60 * 60 * 1000;
+}
+
+export async function syncSharedCredentialsForUserRoles(
+ userId: string,
+ operation: string,
+): Promise {
+ try {
+ const { SharedHostSecretsManager } =
+ await import("../utils/shared-host-secrets-manager.js");
+ await SharedHostSecretsManager.getInstance().snapshotForUserRoles(userId);
+ const { SharedCredentialSecretsManager } =
+ await import("../utils/shared-credential-secrets-manager.js");
+ await SharedCredentialSecretsManager.getInstance().snapshotForUserRoles(
+ userId,
+ );
+ } catch (error) {
+ authLogger.warn("Failed to sync role shared host secrets", {
+ operation,
+ userId,
+ error,
+ });
+ }
+}
+
+export interface IssueSessionOptions {
+ methodId: string;
+ rememberMe: boolean;
+ /** Username the rate limiter counted attempts under, to clear them. */
+ rateLimitUsername?: string;
+ ssoProviderId?: number | null;
+ oidcSub?: string | null;
+ oidcSid?: string | null;
+ /** SSO logins keep desktop and mobile apps signed in for 30 days. */
+ longLivedForApps?: boolean;
+}
+
+export interface IssuedSession {
+ token: string;
+ maxAge: number;
+ body: Record;
+}
+
+/**
+ * Mints the JWT and writes the audit line. The caller decides how the token
+ * reaches the client: a JSON body with a cookie, or a redirect.
+ */
+export async function issueSession(
+ req: Request,
+ user: UserRecord,
+ options: IssueSessionOptions,
+): Promise {
+ const authManager = AuthManager.getInstance();
+ const deviceInfo = parseUserAgent(req);
+
+ const token = await authManager.generateJWTToken(user.id, {
+ rememberMe: options.rememberMe,
+ deviceType: deviceInfo.type,
+ deviceInfo: deviceInfo.deviceInfo,
+ oidcSub: options.oidcSub ?? null,
+ oidcSid: options.oidcSid ?? null,
+ ssoProviderId: options.ssoProviderId ?? null,
+ });
+
+ if (options.rateLimitUsername) {
+ const clientIp = req.ip || req.socket?.remoteAddress || "unknown";
+ loginRateLimiter.resetAttempts(clientIp, options.rateLimitUsername);
+ }
+
+ const { ipAddress, userAgent } = getRequestMeta(req);
+ await logAudit({
+ userId: user.id,
+ username: user.username,
+ action: "login",
+ resourceType: "session",
+ details: JSON.stringify({ method: options.methodId }),
+ ipAddress,
+ userAgent,
+ success: true,
+ });
+ notifyAutomationInternalEvent("user_login", user.id, undefined, {
+ username: user.username,
+ ipAddress,
+ });
+
+ authLogger.success("User login successful", {
+ operation: "user_login_complete",
+ userId: user.id,
+ username: user.username,
+ method: options.methodId,
+ });
+
+ const maxAge =
+ options.longLivedForApps &&
+ (deviceInfo.type === "desktop" || deviceInfo.type === "mobile")
+ ? THIRTY_DAYS_MS
+ : await sessionCookieMaxAge(options.rememberMe);
+
+ return {
+ token,
+ maxAge,
+ body: {
+ success: true,
+ is_admin: !!user.isAdmin,
+ username: user.username,
+ userId: user.id,
+ is_oidc: !!user.isOidc,
+ totp_enabled: !!user.totpEnabled,
+ ...(isNativeAppRequest(req) ? { token } : {}),
+ },
+ };
+}
+
+/** Sets the cookie and sends the body. */
+export function sendSession(
+ req: Request,
+ res: Response,
+ session: IssuedSession,
+): Response {
+ const authManager = AuthManager.getInstance();
+ return res
+ .cookie(
+ "jwt",
+ session.token,
+ authManager.getSecureCookieOptions(req, session.maxAge),
+ )
+ .json(session.body);
+}
diff --git a/src/backend/auth/types.ts b/src/backend/auth/types.ts
new file mode 100644
index 000000000..a618a305c
--- /dev/null
+++ b/src/backend/auth/types.ts
@@ -0,0 +1,37 @@
+import type { PluginVerifiedIdentity } from "@termix/plugin-sdk/backend";
+
+export { LoginMethodError } from "@termix/plugin-sdk/backend";
+
+/** Extra fields core's own methods may set. Plugins never see these. */
+interface CoreIdentityExtras {
+ /**
+ * The identifier string the user row carried before user_external_identities
+ * existed ("ldap::", "github::" or a bare OIDC
+ * subject). Found users get their identity row linked lazily; new users keep
+ * the column filled so older code that reads it still works.
+ */
+ legacyIdentifier?: string;
+ /** SSO provider row the session came from, for back-channel logout. */
+ ssoProviderId?: number | null;
+ oidcSub?: string | null;
+ oidcSid?: string | null;
+ /** Provider group to role mapping, applied on every login. */
+ roleSync?: { desired: string[]; managed: string[] };
+ /** Shown when the user's data key cannot be unlocked by this method. */
+ unlockError?: string;
+ /** Username the login rate limiter counted, cleared on success. */
+ rateLimitUsername?: string;
+}
+
+export type VerifiedIdentity = PluginVerifiedIdentity & CoreIdentityExtras;
+
+/** What a login needs to remember while it waits for a second factor. */
+export interface PendingLogin {
+ userId: string;
+ methodId: string;
+ rememberMe: boolean;
+ ssoProviderId?: number | null;
+ oidcSub?: string | null;
+ oidcSid?: string | null;
+ createdAt: number;
+}
diff --git a/src/backend/database/database.ts b/src/backend/database/database.ts
index 24deab594..8e0dd754b 100644
--- a/src/backend/database/database.ts
+++ b/src/backend/database/database.ts
@@ -9,6 +9,7 @@ import userRoutes from "./routes/users.js";
import hostRoutes from "./routes/host.js";
import alertRoutes from "./routes/alerts.js";
import credentialsRoutes from "./routes/credentials.js";
+import sshAuthRoutes from "./routes/ssh-auth-routes.js";
import snippetsRoutes from "./routes/snippets.js";
import c2sTunnelPresetRoutes from "./routes/c2s-tunnel-presets.js";
import terminalRoutes from "./routes/terminal.js";
@@ -27,7 +28,7 @@ import vaultRoutes from "./routes/vault.js";
import secretSourceRoutes from "./routes/secret-sources.js";
import notificationChannelsRoutes from "./routes/notification-channels-routes.js";
import syncRoutes from "./routes/sync.js";
-import pluginApiRoutes from "./routes/plugin-api-routes.js";
+import { mountPluginApi } from "./routes/plugin-api-routes.js";
import { attachPluginWebSockets } from "../plugins/ws.js";
import pluginRoutes from "./routes/plugins.js";
import { createPluginAssetsRouter } from "../plugins/assets.js";
@@ -1762,6 +1763,7 @@ app.use("/users", userRoutes);
app.use("/host", hostRoutes);
app.use("/alerts", alertRoutes);
app.use("/credentials", credentialsRoutes);
+app.use("/ssh-auth", sshAuthRoutes);
app.use("/snippets", snippetsRoutes);
app.use("/c2s-tunnel-presets", c2sTunnelPresetRoutes);
app.use("/terminal", terminalRoutes);
@@ -1785,7 +1787,7 @@ app.use(
"/plugin-assets",
createPluginAssetsRouter((id) => getPluginRuntime().loader.get(id)),
);
-app.use("/plugin-api", authenticateJWT, pluginApiRoutes);
+mountPluginApi(app);
const frontendDistPaths = [
path.join(__dirname, "../../../dist"),
diff --git a/src/backend/database/db/index.ts b/src/backend/database/db/index.ts
index 0270965ff..e1aacca37 100644
--- a/src/backend/database/db/index.ts
+++ b/src/backend/database/db/index.ts
@@ -269,6 +269,29 @@ async function initializeCompleteDatabase(): Promise {
FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
);
+ CREATE TABLE IF NOT EXISTS user_external_identities (
+ id INTEGER PRIMARY KEY AUTOINCREMENT,
+ user_id TEXT NOT NULL,
+ provider_id TEXT NOT NULL,
+ subject TEXT NOT NULL,
+ email TEXT,
+ created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+ UNIQUE (provider_id, subject),
+ FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
+ );
+
+ CREATE INDEX IF NOT EXISTS idx_user_external_identities_user ON user_external_identities (user_id);
+
+ CREATE TABLE IF NOT EXISTS user_second_factors (
+ id INTEGER PRIMARY KEY AUTOINCREMENT,
+ user_id TEXT NOT NULL,
+ plugin_id TEXT NOT NULL,
+ factor_id TEXT NOT NULL,
+ enrolled_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+ UNIQUE (user_id, plugin_id, factor_id),
+ FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
+ );
+
CREATE TABLE IF NOT EXISTS webauthn_credentials (
id TEXT PRIMARY KEY,
user_id TEXT NOT NULL,
diff --git a/src/backend/database/db/schema.mysql.ts b/src/backend/database/db/schema.mysql.ts
index 902712377..de90b1ced 100644
--- a/src/backend/database/db/schema.mysql.ts
+++ b/src/backend/database/db/schema.mysql.ts
@@ -120,6 +120,60 @@ export const trustedDevices = mysqlTable(
(table) => [index("idx_trusted_devices_user_id").on(table.userId)],
);
+/**
+ * A sign-in identity from an external provider (OIDC, LDAP, GitHub, ...).
+ * Replaces identifier strings like "ldap::" on users.
+ */
+export const userExternalIdentities = mysqlTable(
+ "user_external_identities",
+ {
+ id: int("id").autoincrement().primaryKey(),
+ userId: varchar("user_id", { length: 255 })
+ .notNull()
+ .references(() => users.id, { onDelete: "cascade" }),
+ providerId: varchar("provider_id", { length: 255 }).notNull(),
+ /** The provider's id for the user, at most 255 characters. */
+ subject: varchar("subject", { length: 255 }).notNull(),
+ email: text("email"),
+ createdAt: varchar("created_at", { length: 255 })
+ .notNull()
+ .default(sql`(CURRENT_TIMESTAMP)`),
+ },
+ (table) => [
+ uniqueIndex("idx_user_external_identities_provider_subject").on(
+ table.providerId,
+ table.subject,
+ ),
+ index("idx_user_external_identities_user").on(table.userId),
+ ],
+);
+
+/**
+ * Which second factors a user enrolled in, by plugin. Kept when the plugin is
+ * disabled or removed, so login fails closed instead of skipping the factor.
+ */
+export const userSecondFactors = mysqlTable(
+ "user_second_factors",
+ {
+ id: int("id").autoincrement().primaryKey(),
+ userId: varchar("user_id", { length: 255 })
+ .notNull()
+ .references(() => users.id, { onDelete: "cascade" }),
+ pluginId: varchar("plugin_id", { length: 255 }).notNull(),
+ factorId: varchar("factor_id", { length: 255 }).notNull(),
+ enrolledAt: text("enrolled_at")
+ .notNull()
+ .default(sql`(CURRENT_TIMESTAMP)`),
+ },
+ (table) => [
+ uniqueIndex("idx_user_second_factors_user_factor").on(
+ table.userId,
+ table.pluginId,
+ table.factorId,
+ ),
+ ],
+);
+
export const webauthnCredentials = mysqlTable("webauthn_credentials", {
id: varchar("id", { length: 255 }).primaryKey(),
userId: varchar("user_id", { length: 255 })
diff --git a/src/backend/database/db/schema.pg.ts b/src/backend/database/db/schema.pg.ts
index 2efd0ac9d..ca658e463 100644
--- a/src/backend/database/db/schema.pg.ts
+++ b/src/backend/database/db/schema.pg.ts
@@ -121,6 +121,60 @@ export const trustedDevices = pgTable(
(table) => [index("idx_trusted_devices_user_id").on(table.userId)],
);
+/**
+ * A sign-in identity from an external provider (OIDC, LDAP, GitHub, ...).
+ * Replaces identifier strings like "ldap::" on users.
+ */
+export const userExternalIdentities = pgTable(
+ "user_external_identities",
+ {
+ id: serial("id").primaryKey(),
+ userId: varchar("user_id", { length: 255 })
+ .notNull()
+ .references(() => users.id, { onDelete: "cascade" }),
+ providerId: varchar("provider_id", { length: 255 }).notNull(),
+ /** The provider's id for the user, at most 255 characters. */
+ subject: varchar("subject", { length: 255 }).notNull(),
+ email: text("email"),
+ createdAt: varchar("created_at", { length: 255 })
+ .notNull()
+ .default(sql`CURRENT_TIMESTAMP`),
+ },
+ (table) => [
+ uniqueIndex("idx_user_external_identities_provider_subject").on(
+ table.providerId,
+ table.subject,
+ ),
+ index("idx_user_external_identities_user").on(table.userId),
+ ],
+);
+
+/**
+ * Which second factors a user enrolled in, by plugin. Kept when the plugin is
+ * disabled or removed, so login fails closed instead of skipping the factor.
+ */
+export const userSecondFactors = pgTable(
+ "user_second_factors",
+ {
+ id: serial("id").primaryKey(),
+ userId: varchar("user_id", { length: 255 })
+ .notNull()
+ .references(() => users.id, { onDelete: "cascade" }),
+ pluginId: varchar("plugin_id", { length: 255 }).notNull(),
+ factorId: varchar("factor_id", { length: 255 }).notNull(),
+ enrolledAt: text("enrolled_at")
+ .notNull()
+ .default(sql`CURRENT_TIMESTAMP`),
+ },
+ (table) => [
+ uniqueIndex("idx_user_second_factors_user_factor").on(
+ table.userId,
+ table.pluginId,
+ table.factorId,
+ ),
+ ],
+);
+
export const webauthnCredentials = pgTable("webauthn_credentials", {
id: varchar("id", { length: 255 }).primaryKey(),
userId: varchar("user_id", { length: 255 })
diff --git a/src/backend/database/db/schema.ts b/src/backend/database/db/schema.ts
index 85af39619..5e5c10c37 100644
--- a/src/backend/database/db/schema.ts
+++ b/src/backend/database/db/schema.ts
@@ -111,6 +111,60 @@ export const trustedDevices = sqliteTable(
(table) => [index("idx_trusted_devices_user_id").on(table.userId)],
);
+/**
+ * A sign-in identity from an external provider (OIDC, LDAP, GitHub, ...).
+ * Replaces identifier strings like "ldap::" on users.
+ */
+export const userExternalIdentities = sqliteTable(
+ "user_external_identities",
+ {
+ id: integer("id").primaryKey({ autoIncrement: true }),
+ userId: text("user_id")
+ .notNull()
+ .references(() => users.id, { onDelete: "cascade" }),
+ providerId: text("provider_id").notNull(),
+ /** The provider's id for the user, at most 255 characters. */
+ subject: text("subject").notNull(),
+ email: text("email"),
+ createdAt: text("created_at")
+ .notNull()
+ .default(sql`CURRENT_TIMESTAMP`),
+ },
+ (table) => [
+ uniqueIndex("idx_user_external_identities_provider_subject").on(
+ table.providerId,
+ table.subject,
+ ),
+ index("idx_user_external_identities_user").on(table.userId),
+ ],
+);
+
+/**
+ * Which second factors a user enrolled in, by plugin. Kept when the plugin is
+ * disabled or removed, so login fails closed instead of skipping the factor.
+ */
+export const userSecondFactors = sqliteTable(
+ "user_second_factors",
+ {
+ id: integer("id").primaryKey({ autoIncrement: true }),
+ userId: text("user_id")
+ .notNull()
+ .references(() => users.id, { onDelete: "cascade" }),
+ pluginId: text("plugin_id").notNull(),
+ factorId: text("factor_id").notNull(),
+ enrolledAt: text("enrolled_at")
+ .notNull()
+ .default(sql`CURRENT_TIMESTAMP`),
+ },
+ (table) => [
+ uniqueIndex("idx_user_second_factors_user_factor").on(
+ table.userId,
+ table.pluginId,
+ table.factorId,
+ ),
+ ],
+);
+
export const webauthnCredentials = sqliteTable("webauthn_credentials", {
id: text("id").primaryKey(),
userId: text("user_id")
diff --git a/src/backend/database/repositories/factory.ts b/src/backend/database/repositories/factory.ts
index 2e0748cf6..c931e4266 100644
--- a/src/backend/database/repositories/factory.ts
+++ b/src/backend/database/repositories/factory.ts
@@ -37,6 +37,7 @@ import { PluginStorageRepository } from "./plugin-storage-repository.js";
import { PluginSettingsRepository } from "./plugin-settings-repository.js";
import { PluginMigrationRepository } from "./plugin-migration-repository.js";
import { PluginPermissionGrantRepository } from "./plugin-permission-grant-repository.js";
+import { UserAuthRepository } from "./user-auth-repository.js";
import { PluginRegistryRepository } from "./plugin-registry-repository.js";
import { PluginInstallCountRepository } from "./plugin-install-count-repository.js";
import { RbacAccessRepository } from "./rbac-access-repository.js";
@@ -380,6 +381,13 @@ export function createCurrentPluginRepository(): PluginRepository {
);
}
+export function createCurrentUserAuthRepository(): UserAuthRepository {
+ return new UserAuthRepository(
+ createCurrentRepositoryContext(),
+ createCurrentRepositoryWriteHook("user_auth_repository_write"),
+ );
+}
+
export function createCurrentPluginPermissionGrantRepository(): PluginPermissionGrantRepository {
return new PluginPermissionGrantRepository(
createCurrentRepositoryContext(),
diff --git a/src/backend/database/repositories/user-auth-repository.ts b/src/backend/database/repositories/user-auth-repository.ts
new file mode 100644
index 000000000..2508ee4dc
--- /dev/null
+++ b/src/backend/database/repositories/user-auth-repository.ts
@@ -0,0 +1,169 @@
+import crypto from "crypto";
+import { and, eq } from "drizzle-orm";
+import { userExternalIdentities, userSecondFactors } from "../db/schema.js";
+import type { DatabaseContext } from "./database-context.js";
+import { rowsAffected } from "./mutation-result.js";
+
+export type UserExternalIdentityRecord =
+ typeof userExternalIdentities.$inferSelect;
+export type UserSecondFactorRecord = typeof userSecondFactors.$inferSelect;
+
+/** Subjects are indexed, so they stay within the portable key length. */
+export const MAX_EXTERNAL_SUBJECT_LENGTH = 255;
+
+/**
+ * Keeps a subject within the index length. Longer ones are hashed, which is
+ * stable, so the same provider answer always finds the same row.
+ */
+export function normalizeExternalSubject(subject: string): string {
+ if (subject.length <= MAX_EXTERNAL_SUBJECT_LENGTH) return subject;
+ return `sha256:${crypto.createHash("sha256").update(subject).digest("hex")}`;
+}
+
+/** External sign-in identities and second-factor enrolments. */
+export class UserAuthRepository {
+ constructor(
+ private readonly context: DatabaseContext,
+ private readonly onWrite?: () => void | Promise,
+ ) {}
+
+ async findIdentity(
+ providerId: string,
+ rawSubject: string,
+ ): Promise {
+ const subject = normalizeExternalSubject(rawSubject);
+ const rows = await this.context.drizzle
+ .select()
+ .from(userExternalIdentities)
+ .where(
+ and(
+ eq(userExternalIdentities.providerId, providerId),
+ eq(userExternalIdentities.subject, subject),
+ ),
+ )
+ .limit(1);
+ return rows[0] ?? null;
+ }
+
+ async listIdentitiesForUser(
+ userId: string,
+ ): Promise {
+ return this.context.drizzle
+ .select()
+ .from(userExternalIdentities)
+ .where(eq(userExternalIdentities.userId, userId));
+ }
+
+ async listAllIdentities(): Promise {
+ return this.context.drizzle.select().from(userExternalIdentities);
+ }
+
+ /** Links or moves an identity to a user. Idempotent. */
+ async linkIdentity(input: {
+ userId: string;
+ providerId: string;
+ subject: string;
+ email?: string | null;
+ }): Promise {
+ const subject = normalizeExternalSubject(input.subject);
+ const existing = await this.findIdentity(input.providerId, subject);
+ if (existing) {
+ if (existing.userId === input.userId) return;
+ await this.context.drizzle
+ .update(userExternalIdentities)
+ .set({ userId: input.userId, email: input.email ?? existing.email })
+ .where(eq(userExternalIdentities.id, existing.id));
+ } else {
+ await this.context.drizzle.insert(userExternalIdentities).values({
+ userId: input.userId,
+ providerId: input.providerId,
+ subject,
+ email: input.email ?? null,
+ createdAt: new Date().toISOString(),
+ });
+ }
+ await this.onWrite?.();
+ }
+
+ async unlinkIdentitiesForUser(userId: string): Promise {
+ const result = await this.context.drizzle
+ .delete(userExternalIdentities)
+ .where(eq(userExternalIdentities.userId, userId));
+ const affected = rowsAffected(result);
+ if (affected > 0) await this.onWrite?.();
+ return affected;
+ }
+
+ async moveIdentities(fromUserId: string, toUserId: string): Promise {
+ await this.context.drizzle
+ .update(userExternalIdentities)
+ .set({ userId: toUserId })
+ .where(eq(userExternalIdentities.userId, fromUserId));
+ await this.onWrite?.();
+ }
+
+ async listSecondFactors(userId: string): Promise {
+ return this.context.drizzle
+ .select()
+ .from(userSecondFactors)
+ .where(eq(userSecondFactors.userId, userId));
+ }
+
+ async listAllSecondFactors(): Promise {
+ return this.context.drizzle.select().from(userSecondFactors);
+ }
+
+ async recordSecondFactor(
+ userId: string,
+ pluginId: string,
+ factorId: string,
+ ): Promise {
+ const rows = await this.context.drizzle
+ .select()
+ .from(userSecondFactors)
+ .where(
+ and(
+ eq(userSecondFactors.userId, userId),
+ eq(userSecondFactors.pluginId, pluginId),
+ eq(userSecondFactors.factorId, factorId),
+ ),
+ )
+ .limit(1);
+ if (rows[0]) return;
+ await this.context.drizzle.insert(userSecondFactors).values({
+ userId,
+ pluginId,
+ factorId,
+ enrolledAt: new Date().toISOString(),
+ });
+ await this.onWrite?.();
+ }
+
+ async removeSecondFactor(
+ userId: string,
+ pluginId: string,
+ factorId: string,
+ ): Promise {
+ const result = await this.context.drizzle
+ .delete(userSecondFactors)
+ .where(
+ and(
+ eq(userSecondFactors.userId, userId),
+ eq(userSecondFactors.pluginId, pluginId),
+ eq(userSecondFactors.factorId, factorId),
+ ),
+ );
+ const affected = rowsAffected(result) > 0;
+ if (affected) await this.onWrite?.();
+ return affected;
+ }
+
+ async clearSecondFactors(userId: string): Promise {
+ const result = await this.context.drizzle
+ .delete(userSecondFactors)
+ .where(eq(userSecondFactors.userId, userId));
+ const affected = rowsAffected(result);
+ if (affected > 0) await this.onWrite?.();
+ return affected;
+ }
+}
diff --git a/src/backend/database/routes/auth-routes.ts b/src/backend/database/routes/auth-routes.ts
new file mode 100644
index 000000000..52706955b
--- /dev/null
+++ b/src/backend/database/routes/auth-routes.ts
@@ -0,0 +1,314 @@
+/**
+ * The generic login surface: every registered login method and second factor
+ * is reachable here, core's and plugins' alike. The older per-method routes
+ * (/users/login, /users/oidc/*, /users/ldap/login, ...) stay as thin wrappers
+ * so existing clients keep working.
+ */
+
+import type { Request, Response, Router } from "express";
+import { authLogger } from "../../utils/logger.js";
+import { isOidcTokenCallback } from "../../utils/oidc-desktop-callback.js";
+import { ensureCoreLoginProviders } from "../../auth/core-auth.js";
+import {
+ readPendingLogin,
+ redirectWithLoginError,
+ respondWithLogin,
+ respondWithRedirectLogin,
+ sendLoginError,
+ verifySecondFactorAndRespond,
+ evaluateSecondFactors,
+} from "../../auth/login-pipeline.js";
+import { getLoginMethod, listLoginMethods } from "../../auth/registry.js";
+import { LoginMethodError, type VerifiedIdentity } from "../../auth/types.js";
+
+export interface PublicLoginMethod {
+ id: string;
+ pluginId: string;
+ kind: "redirect" | "form";
+ labelKey: string;
+ icon?: string;
+ instances: Array<{ id: string; label: string }>;
+}
+
+/** What the login screen may know: ids, labels and enabled instances. */
+export async function listPublicLoginMethods(): Promise {
+ ensureCoreLoginProviders();
+ const methods: PublicLoginMethod[] = [];
+ for (const method of listLoginMethods()) {
+ let instances: Array<{ id: string; label: string }> = [];
+ if (method.describe) {
+ try {
+ instances = (await method.describe())
+ .filter((instance) => instance.enabled)
+ .map((instance) => ({ id: instance.id, label: instance.label }));
+ } catch (error) {
+ authLogger.warn("Login method could not describe itself", {
+ operation: "login_method_describe",
+ methodId: method.id,
+ error,
+ });
+ continue;
+ }
+ if (instances.length === 0) continue;
+ }
+ methods.push({
+ id: method.id,
+ pluginId: method.pluginId,
+ kind: method.kind,
+ labelKey: method.labelKey,
+ icon: method.icon,
+ instances,
+ });
+ }
+ return methods;
+}
+
+function instanceParam(req: Request): string | null {
+ const value = req.query.instance ?? req.body?.instanceId;
+ return typeof value === "string" && value ? value : null;
+}
+
+function methodOr404(req: Request, res: Response) {
+ ensureCoreLoginProviders();
+ const method = getLoginMethod(String(req.params.methodId));
+ if (!method) {
+ res.status(404).json({ error: "Unknown login method" });
+ return null;
+ }
+ return method;
+}
+
+export function registerAuthRoutes(router: Router): void {
+ /**
+ * @openapi
+ * /users/auth/methods:
+ * get:
+ * summary: List login methods
+ * description: Public. The login methods with at least one enabled instance, for the login screen. Carries ids and labels only.
+ * tags:
+ * - Auth
+ * responses:
+ * 200:
+ * description: Login methods.
+ */
+ router.get("/auth/methods", async (_req, res) => {
+ try {
+ res.json({ methods: await listPublicLoginMethods() });
+ } catch (error) {
+ authLogger.error("Failed to list login methods", error);
+ res.status(500).json({ error: "Failed to list login methods" });
+ }
+ });
+
+ /**
+ * @openapi
+ * /users/auth/second-factor/{factorId}/challenge:
+ * post:
+ * summary: Start a second factor
+ * description: Returns whatever the factor needs the client to have before the user answers, for a login waiting on a second factor.
+ * tags:
+ * - Auth
+ * parameters:
+ * - in: path
+ * name: factorId
+ * required: true
+ * schema:
+ * type: string
+ * responses:
+ * 200:
+ * description: Challenge data.
+ * 401:
+ * description: No pending login.
+ * 404:
+ * description: Factor not enabled for this user.
+ */
+ router.post("/auth/second-factor/:factorId/challenge", async (req, res) => {
+ try {
+ const lookup = await readPendingLogin(req);
+ if (!lookup) {
+ return res.status(401).json({ error: "Invalid temporary token" });
+ }
+ const { required } = await evaluateSecondFactors(lookup.userId);
+ const factor = required.find(
+ (candidate) => candidate.id === req.params.factorId,
+ );
+ if (!factor) {
+ return res.status(404).json({ error: "Second factor not enabled" });
+ }
+ res.json({
+ challenge: (await factor.challenge?.(lookup.userId)) ?? null,
+ });
+ } catch (error) {
+ sendLoginError(res, error);
+ }
+ });
+
+ /**
+ * @openapi
+ * /users/auth/second-factor/{factorId}/verify:
+ * post:
+ * summary: Finish a second factor
+ * description: Checks the user's answer for a login waiting on a second factor and issues the session. The pending token comes from temp_token in the body or the pending-login cookie.
+ * tags:
+ * - Auth
+ * parameters:
+ * - in: path
+ * name: factorId
+ * required: true
+ * schema:
+ * type: string
+ * responses:
+ * 200:
+ * description: Login successful.
+ * 401:
+ * description: Wrong answer or no pending login.
+ * 403:
+ * description: An enrolled factor is unavailable.
+ * 429:
+ * description: Too many attempts.
+ */
+ router.post("/auth/second-factor/:factorId/verify", async (req, res) => {
+ try {
+ await verifySecondFactorAndRespond(req, res, String(req.params.factorId));
+ } catch (error) {
+ sendLoginError(res, error);
+ }
+ });
+
+ /**
+ * @openapi
+ * /users/auth/{methodId}/start:
+ * get:
+ * summary: Start a redirect login
+ * description: Returns the URL to send the browser to for a redirect login method, such as an SSO provider.
+ * tags:
+ * - Auth
+ * parameters:
+ * - in: path
+ * name: methodId
+ * required: true
+ * schema:
+ * type: string
+ * - in: query
+ * name: instance
+ * schema:
+ * type: string
+ * responses:
+ * 200:
+ * description: Redirect URL.
+ * 404:
+ * description: Unknown login method.
+ */
+ router.get("/auth/:methodId/start", async (req, res) => {
+ const method = methodOr404(req, res);
+ if (!method) return;
+ if (method.kind !== "redirect" || !method.start) {
+ return res.status(400).json({ error: "Not a redirect login method" });
+ }
+ try {
+ res.json(await method.start(req as never, instanceParam(req)));
+ } catch (error) {
+ sendLoginError(res, error);
+ }
+ });
+
+ const callback = async (req: Request, res: Response) => {
+ const method = methodOr404(req, res);
+ if (!method) return;
+ if (!method.callback) {
+ return res.status(400).json({ error: "Not a redirect login method" });
+ }
+ let identity: VerifiedIdentity;
+ try {
+ identity = await method.callback(req as never);
+ } catch (error) {
+ const returnTo = (error as { returnTo?: string }).returnTo;
+ if (returnTo) return redirectWithLoginError(res, returnTo, error);
+ return sendLoginError(res, error);
+ }
+ await respondWithRedirectLogin(
+ req,
+ res,
+ identity,
+ { methodId: method.id, rememberMe: !!identity.rememberMe },
+ isOidcTokenCallback,
+ );
+ };
+
+ /**
+ * @openapi
+ * /users/auth/{methodId}/callback:
+ * get:
+ * summary: Redirect login callback
+ * description: Where a redirect login method's provider sends the browser back. Redirects to the app with a session, a second-factor step, or an error.
+ * tags:
+ * - Auth
+ * parameters:
+ * - in: path
+ * name: methodId
+ * required: true
+ * schema:
+ * type: string
+ * responses:
+ * 302:
+ * description: Back to the app.
+ * post:
+ * summary: Redirect login callback (form post)
+ * description: Same as the GET form, for providers that post their answer.
+ * tags:
+ * - Auth
+ * parameters:
+ * - in: path
+ * name: methodId
+ * required: true
+ * schema:
+ * type: string
+ * responses:
+ * 302:
+ * description: Back to the app.
+ */
+ router.get("/auth/:methodId/callback", callback);
+ router.post("/auth/:methodId/callback", callback);
+
+ /**
+ * @openapi
+ * /users/auth/{methodId}/verify:
+ * post:
+ * summary: Form login
+ * description: Checks what the user typed for a form login method, then issues a session or asks for a second factor.
+ * tags:
+ * - Auth
+ * parameters:
+ * - in: path
+ * name: methodId
+ * required: true
+ * schema:
+ * type: string
+ * responses:
+ * 200:
+ * description: Login successful, or a second factor is required.
+ * 401:
+ * description: Wrong credentials.
+ * 404:
+ * description: Unknown login method.
+ */
+ router.post("/auth/:methodId/verify", async (req, res) => {
+ const method = methodOr404(req, res);
+ if (!method) return;
+ if (method.kind !== "form" || !method.verify) {
+ return res.status(400).json({ error: "Not a form login method" });
+ }
+ try {
+ const identity = await method.verify(req as never, instanceParam(req));
+ await respondWithLogin(req, res, identity, {
+ methodId: method.id,
+ rememberMe: !!identity.rememberMe || !!req.body?.rememberMe,
+ });
+ } catch (error) {
+ if (!(error instanceof LoginMethodError)) {
+ authLogger.error("Form login failed", error, { methodId: method.id });
+ }
+ sendLoginError(res, error);
+ }
+ });
+}
diff --git a/src/backend/database/routes/credential-deploy-routes.ts b/src/backend/database/routes/credential-deploy-routes.ts
index 306abed20..aef470fe7 100644
--- a/src/backend/database/routes/credential-deploy-routes.ts
+++ b/src/backend/database/routes/credential-deploy-routes.ts
@@ -4,28 +4,56 @@ import type {
CredentialBackend,
} from "../../../types/index.js";
import type { Request, RequestHandler, Response, Router } from "express";
-import ssh2Pkg from "ssh2";
+import type { Client as SshClient } from "ssh2";
import { createCurrentHostResolutionRepository } from "../repositories/factory.js";
-import { preparePrivateKeyForSSH2 } from "../../utils/ssh-key-utils.js";
+import { connectHost } from "../../hosts/connect/connect-host.js";
+import type { SshConnectHost } from "../../hosts/connect/types.js";
+import { resolveHostById } from "../../hosts/host-resolver.js";
-const { Client } = ssh2Pkg;
+function describeDeployError(err: unknown): string {
+ const message = getErrorMessage(err, "Connection failed");
+ if (message.includes("All configured authentication methods failed")) {
+ return "Authentication failed. Please check your credentials and ensure the SSH service is running.";
+ }
+ if (message.includes("ENOTFOUND") || message.includes("ENOENT")) {
+ return "Could not resolve hostname or connect to server.";
+ }
+ if (message.includes("ECONNREFUSED")) {
+ return "Connection refused. The server may not be running or the port may be incorrect.";
+ }
+ if (message.includes("ETIMEDOUT")) {
+ return "Connection timed out. Check your network connection and server availability.";
+ }
+ if (
+ message.includes("authentication failed") ||
+ message.includes("Permission denied")
+ ) {
+ return "Authentication failed. Please check your username and password/key.";
+ }
+ if (message === "SSH connection timeout") return "Connection timeout";
+ return message;
+}
async function deploySSHKeyToHost(
- hostConfig: Record,
+ host: SshConnectHost,
+ userId: string,
credData: CredentialBackend,
): Promise<{ success: boolean; message?: string; error?: string }> {
const publicKey = credData.publicKey as string;
+
+ let conn: SshClient;
+ try {
+ ({ client: conn } = await connectHost(host, {
+ userId,
+ purpose: "credential-deploy",
+ timeoutMs: 120000,
+ }));
+ } catch (error) {
+ return { success: false, error: describeDeployError(error) };
+ }
+
return new Promise((resolve) => {
- const conn = new Client();
-
- const connectionTimeout = setTimeout(() => {
- conn.destroy();
- resolve({ success: false, error: "Connection timeout" });
- }, 120000);
-
- conn.on("ready", async () => {
- clearTimeout(connectionTimeout);
-
+ void (async () => {
try {
await new Promise((resolveCmd, rejectCmd) => {
const cmdTimeout = setTimeout(() => {
@@ -238,121 +266,7 @@ async function deploySSHKeyToHost(
error: getErrorMessage(error, "Deployment failed"),
});
}
- });
-
- conn.on("error", (err) => {
- clearTimeout(connectionTimeout);
- let errorMessage = err.message;
-
- if (
- err.message.includes("All configured authentication methods failed")
- ) {
- errorMessage =
- "Authentication failed. Please check your credentials and ensure the SSH service is running.";
- } else if (
- err.message.includes("ENOTFOUND") ||
- err.message.includes("ENOENT")
- ) {
- errorMessage = "Could not resolve hostname or connect to server.";
- } else if (err.message.includes("ECONNREFUSED")) {
- errorMessage =
- "Connection refused. The server may not be running or the port may be incorrect.";
- } else if (err.message.includes("ETIMEDOUT")) {
- errorMessage =
- "Connection timed out. Check your network connection and server availability.";
- } else if (
- err.message.includes("authentication failed") ||
- err.message.includes("Permission denied")
- ) {
- errorMessage =
- "Authentication failed. Please check your username and password/key.";
- }
-
- resolve({ success: false, error: errorMessage });
- });
-
- try {
- const connectionConfig: Record = {
- host: hostConfig.ip,
- port: hostConfig.port || 22,
- username: hostConfig.username,
- readyTimeout: 60000,
- keepaliveInterval: 30000,
- keepaliveCountMax: 3,
- tcpKeepAlive: true,
- tcpKeepAliveInitialDelay: 30000,
- algorithms: {
- kex: [
- "diffie-hellman-group14-sha256",
- "diffie-hellman-group14-sha1",
- "diffie-hellman-group1-sha1",
- "diffie-hellman-group-exchange-sha256",
- "diffie-hellman-group-exchange-sha1",
- "ecdh-sha2-nistp256",
- "ecdh-sha2-nistp384",
- "ecdh-sha2-nistp521",
- ],
- cipher: [
- "aes128-ctr",
- "aes192-ctr",
- "aes256-ctr",
- "aes128-gcm@openssh.com",
- "aes256-gcm@openssh.com",
- "aes128-cbc",
- "aes192-cbc",
- "aes256-cbc",
- "3des-cbc",
- ],
- hmac: [
- "hmac-sha2-256-etm@openssh.com",
- "hmac-sha2-512-etm@openssh.com",
- "hmac-sha2-256",
- "hmac-sha2-512",
- "hmac-sha1",
- "hmac-md5",
- ],
- compress: ["none", "zlib@openssh.com", "zlib"],
- },
- };
-
- if (hostConfig.authType === "password" && hostConfig.password) {
- connectionConfig.password = hostConfig.password;
- } else if (hostConfig.authType === "key" && hostConfig.privateKey) {
- try {
- const privateKey = hostConfig.privateKey as string;
- connectionConfig.privateKey = preparePrivateKeyForSSH2(
- privateKey,
- hostConfig.keyPassword as string | undefined,
- );
-
- if (hostConfig.keyPassword) {
- connectionConfig.passphrase = hostConfig.keyPassword;
- }
- } catch (keyError) {
- clearTimeout(connectionTimeout);
- resolve({
- success: false,
- error: `Invalid SSH key format: ${getErrorMessage(keyError)}`,
- });
- return;
- }
- } else {
- clearTimeout(connectionTimeout);
- resolve({
- success: false,
- error: `Invalid authentication configuration. Auth type: ${hostConfig.authType}, has password: ${!!hostConfig.password}, has key: ${!!hostConfig.privateKey}`,
- });
- return;
- }
-
- conn.connect(connectionConfig);
- } catch (error) {
- clearTimeout(connectionTimeout);
- resolve({
- success: false,
- error: getErrorMessage(error, "Connection failed"),
- });
- }
+ })();
});
}
@@ -456,6 +370,8 @@ export function registerCredentialDeployRoutes(
error: "Public key is required for deployment",
});
}
+ // Writing authorized_keys is an owner action, so ownership is checked
+ // before the shared resolver fills in the credentials.
const hostData = await repository.findHostByIdForUser(
targetHostId,
userId,
@@ -468,57 +384,19 @@ export function registerCredentialDeployRoutes(
});
}
- const hostConfig = {
- ip: hostData.ip,
- port: hostData.port,
- username: hostData.username,
- authType: hostData.authType,
- password: hostData.password,
- privateKey: hostData.key,
- keyPassword: hostData.keyPassword,
- };
-
- if (hostData.authType === "credential" && hostData.credentialId) {
- const userId = (req as AuthenticatedRequest).userId;
- if (!userId) {
- return res.status(400).json({
- success: false,
- error: "Authentication required for credential resolution",
- });
- }
-
- try {
- const hostCredential = await repository.findCredentialByIdForUser(
- hostData.credentialId as number,
- userId,
- );
-
- if (hostCredential) {
- hostConfig.authType = hostCredential.authType;
- hostConfig.username = hostCredential.username;
-
- if (hostCredential.authType === "password") {
- hostConfig.password = hostCredential.password;
- } else if (hostCredential.authType === "key") {
- hostConfig.privateKey =
- hostCredential.privateKey || hostCredential.key;
- hostConfig.keyPassword = hostCredential.keyPassword;
- }
- } else {
- return res.status(400).json({
- success: false,
- error: "Host credential not found",
- });
- }
- } catch {
- return res.status(500).json({
- success: false,
- error: "Failed to resolve host credentials",
- });
- }
+ const resolvedHost = await resolveHostById(targetHostId, userId);
+ if (!resolvedHost) {
+ return res.status(400).json({
+ success: false,
+ error: "Host credential not found",
+ });
}
- const deployResult = await deploySSHKeyToHost(hostConfig, credData);
+ const deployResult = await deploySSHKeyToHost(
+ resolvedHost as unknown as SshConnectHost,
+ userId,
+ credData,
+ );
if (deployResult.success) {
res.json({
diff --git a/src/backend/database/routes/credentials.ts b/src/backend/database/routes/credentials.ts
index 31193bfa9..c72726fdb 100644
--- a/src/backend/database/routes/credentials.ts
+++ b/src/backend/database/routes/credentials.ts
@@ -1,5 +1,7 @@
import { getErrorMessage } from "../../utils/error-message.js";
import type { AuthenticatedRequest } from "../../../types/index.js";
+import { listCredentialTypes } from "../../hosts/connect/auth-provider-registry.js";
+import { ensureCoreSshAuthProviders } from "../../hosts/connect/core-providers.js";
import express, { type Request, type Response } from "express";
import { authLogger } from "../../utils/logger.js";
import { PermissionManager } from "../../utils/permission-manager.js";
@@ -23,6 +25,12 @@ import {
createCurrentSyncTombstoneRepository,
} from "../repositories/factory.js";
+/** Built-in password and key, plus any type a plugin offers for credentials. */
+function getCredentialTypes(): string[] {
+ ensureCoreSshAuthProviders();
+ return listCredentialTypes();
+}
+
const router = express.Router();
function isNonEmptyString(val: unknown): val is string {
@@ -110,16 +118,17 @@ router.post(
return res.status(400).json({ error: "Name is required" });
}
- if (!["password", "key"].includes(authType)) {
+ const credentialTypes = getCredentialTypes();
+ if (!credentialTypes.includes(authType)) {
authLogger.warn("Invalid auth type provided", {
operation: "credential_create",
userId,
name,
authType,
});
- return res
- .status(400)
- .json({ error: 'Auth type must be "password" or "key"' });
+ return res.status(400).json({
+ error: `Auth type must be one of: ${credentialTypes.join(", ")}`,
+ });
}
try {
@@ -659,8 +668,14 @@ router.put(
}
if (updateData.username !== undefined)
updateFields.username = updateData.username?.trim() || null;
- if (updateData.authType !== undefined)
+ if (updateData.authType !== undefined) {
+ if (!getCredentialTypes().includes(updateData.authType)) {
+ return res.status(400).json({
+ error: `Auth type must be one of: ${getCredentialTypes().join(", ")}`,
+ });
+ }
updateFields.authType = updateData.authType;
+ }
if (updateData.keyType !== undefined)
updateFields.keyType = updateData.keyType;
diff --git a/src/backend/database/routes/ldap-auth-routes.ts b/src/backend/database/routes/ldap-auth-routes.ts
index b7cbf7fc4..fed98a363 100644
--- a/src/backend/database/routes/ldap-auth-routes.ts
+++ b/src/backend/database/routes/ldap-auth-routes.ts
@@ -1,76 +1,6 @@
import type { Router } from "express";
-import type { LDAPProviderConfig } from "../../../types/index.js";
-import { nanoid } from "nanoid";
-import { authLogger } from "../../utils/logger.js";
-import { AuthManager } from "../../utils/auth-manager.js";
-import { parseUserAgent } from "../../utils/user-agent-parser.js";
-import { isOIDCUserAllowed, loadProviderConfig } from "./user-oidc-utils.js";
-import ldap from "ldapjs";
-import {
- createCurrentRoleRepository,
- createCurrentSettingsRepository,
- createCurrentSsoProviderRepository,
- createCurrentUserRepository,
-} from "../repositories/factory.js";
-
-const authManager = AuthManager.getInstance();
-
-function ldapEscapeFilter(value: string): string {
- return value.replace(
- /[\\*()\x00]/g,
- (c) => `\\${c.charCodeAt(0).toString(16).padStart(2, "0")}`,
- );
-}
-
-function createLDAPClient(
- host: string,
- port: number,
- useTLS: boolean,
-): ldap.Client {
- const url = `${useTLS ? "ldaps" : "ldap"}://${host}:${port}`;
- return ldap.createClient({
- url,
- tlsOptions: useTLS ? { rejectUnauthorized: false } : undefined,
- });
-}
-
-function ldapBind(
- client: ldap.Client,
- dn: string,
- password: string,
-): Promise {
- return new Promise((resolve, reject) => {
- client.bind(dn, password, (err) => {
- if (err) reject(err);
- else resolve();
- });
- });
-}
-
-function ldapSearch(
- client: ldap.Client,
- base: string,
- filter: string,
- attributes: string[],
-): Promise {
- return new Promise((resolve, reject) => {
- const entries: ldap.SearchEntry[] = [];
- client.search(base, { filter, attributes, scope: "sub" }, (err, res) => {
- if (err) return reject(err);
- res.on("searchEntry", (entry) => entries.push(entry));
- res.on("error", reject);
- res.on("end", () => resolve(entries));
- });
- });
-}
-
-function ldapUnbind(client: ldap.Client): void {
- try {
- client.unbind();
- } catch {
- /* best effort */
- }
-}
+import { verifyLdapLogin } from "../../auth/legacy/ldap-login.js";
+import { respondWithLogin, sendLoginError } from "../../auth/login-pipeline.js";
export function registerLDAPAuthRoutes(router: Router): void {
/**
@@ -78,7 +8,7 @@ export function registerLDAPAuthRoutes(router: Router): void {
* /users/ldap/login:
* post:
* summary: LDAP login
- * description: Authenticates a user against an LDAP server.
+ * description: Authenticates a user against an LDAP server, then runs the same second factors and session issuing as every other login.
* tags:
* - SSO
* requestBody:
@@ -98,312 +28,27 @@ export function registerLDAPAuthRoutes(router: Router): void {
* type: boolean
* responses:
* 200:
- * description: Login successful.
+ * description: Login successful, or a second factor is required.
* 400:
* description: Missing fields.
* 401:
* description: Invalid credentials.
* 403:
- * description: User not allowed.
+ * description: User not allowed or registration disabled.
* 404:
* description: Provider not found.
+ * 429:
+ * description: Too many login attempts.
*/
router.post("/ldap/login", async (req, res) => {
- const { providerId, username, password, rememberMe } = req.body as {
- providerId: number;
- username: string;
- password: string;
- rememberMe?: boolean;
- };
-
- if (!providerId || !username || !password) {
- return res
- .status(400)
- .json({ error: "providerId, username, and password are required" });
- }
-
try {
- const provider =
- await createCurrentSsoProviderRepository().findById(providerId);
- if (!provider || provider.type !== "ldap" || !provider.enabled) {
- return res.status(404).json({ error: "LDAP provider not found" });
- }
- } catch (err) {
- authLogger.error("Failed to load LDAP provider", err);
- return res.status(500).json({ error: "Failed to load LDAP provider" });
- }
-
- const providerResult = await loadProviderConfig(providerId);
- if (!providerResult) {
- return res.status(404).json({ error: "LDAP provider not found" });
- }
- const config = providerResult.config as unknown as LDAPProviderConfig;
-
- if (
- !config.host ||
- !config.bindDN ||
- !config.userSearchBase ||
- !config.userSearchFilter
- ) {
- return res.status(500).json({ error: "LDAP provider is misconfigured" });
- }
-
- const serviceClient = createLDAPClient(
- config.host,
- config.port || 389,
- config.useTLS || false,
- );
- try {
- await ldapBind(serviceClient, config.bindDN, config.bindPassword);
-
- const filter = config.userSearchFilter.replace(
- /\{\{username\}\}/g,
- ldapEscapeFilter(username),
- );
- const attrList = [
- config.usernameAttribute || "uid",
- config.displayNameAttribute || "cn",
- "mail",
- "email",
- ];
- const entries = await ldapSearch(
- serviceClient,
- config.userSearchBase,
- filter,
- attrList,
- );
-
- if (entries.length === 0) {
- authLogger.warn("LDAP user not found", {
- operation: "ldap_login",
- username,
- });
- return res.status(401).json({ error: "Invalid username or password" });
- }
-
- const userEntry = entries[0];
- const userDN = userEntry.dn.toString();
-
- const getAttr = (key: string): string => {
- const attr = userEntry.attributes.find((a) => a.type === key);
- return attr
- ? Array.isArray(attr.values)
- ? attr.values[0]
- : String(attr.values)
- : "";
- };
-
- const ldapIdentifier =
- getAttr(config.usernameAttribute || "uid") || username;
- const displayName =
- getAttr(config.displayNameAttribute || "cn") || username;
- const email = getAttr("mail") || getAttr("email") || "";
-
- if (config.allowedUsers) {
- if (
- !isOIDCUserAllowed(
- config.allowedUsers,
- ldapIdentifier,
- email || undefined,
- )
- ) {
- authLogger.warn("LDAP user not in allowed list", {
- operation: "ldap_user_not_allowed",
- ldapIdentifier,
- });
- return res.status(403).json({ error: "User not allowed" });
- }
- }
-
- // Re-bind with user's own credentials to verify password
- const userClient = createLDAPClient(
- config.host,
- config.port || 389,
- config.useTLS || false,
- );
- try {
- await ldapBind(userClient, userDN, password);
- } catch {
- authLogger.warn("LDAP bind failed - wrong password", {
- operation: "ldap_login",
- ldapIdentifier,
- });
- return res.status(401).json({ error: "Invalid username or password" });
- } finally {
- ldapUnbind(userClient);
- }
-
- // Admin group check
- let isAdmin = false;
- if (config.adminGroup && config.groupSearchBase) {
- try {
- const groupFilter = `(member=${ldapEscapeFilter(userDN)})`;
- const groupEntries = await ldapSearch(
- serviceClient,
- config.groupSearchBase,
- groupFilter,
- ["cn", "dn"],
- );
- isAdmin = groupEntries.some((g) => {
- const cn = g.attributes.find((a) => a.type === "cn");
- const cnVal = cn
- ? Array.isArray(cn.values)
- ? cn.values[0]
- : String(cn.values)
- : "";
- return (
- cnVal === config.adminGroup ||
- g.dn.toString() === config.adminGroup
- );
- });
- } catch (groupErr) {
- authLogger.warn("LDAP group check failed", {
- operation: "ldap_group_check",
- error: groupErr,
- });
- }
- }
-
- ldapUnbind(serviceClient);
-
- const deviceInfo = parseUserAgent(req);
- const oidcIdentifier = `ldap:${providerId}:${ldapIdentifier}`;
- const userRepository = createCurrentUserRepository();
-
- let existingUser =
- await userRepository.findByOidcIdentifier(oidcIdentifier);
-
- let userId: string;
- if (!existingUser) {
- let autoProvision = false;
- try {
- autoProvision = await createCurrentSettingsRepository().getBoolean(
- "oidc_auto_provision",
- false,
- );
- } catch {
- /* */
- }
- if (!autoProvision)
- autoProvision =
- (process.env.OIDC_ALLOW_REGISTRATION || "").trim().toLowerCase() ===
- "true";
-
- const isFirst = (await userRepository.countAll()) === 0;
-
- if (!isFirst && !autoProvision) {
- return res.status(403).json({ error: "Registration is disabled" });
- }
-
- userId = nanoid();
- const createdUser = await userRepository.createFirstSsoUser({
- id: userId,
- username: displayName,
- passwordHash: "",
- isAdmin,
- isOidc: true,
- oidcIdentifier,
- ssoProviderId: providerId,
- });
- const isFirstFinal = createdUser.isFirstUser;
-
- try {
- const defaultRoleName = isFirstFinal || isAdmin ? "admin" : "user";
- await createCurrentRoleRepository().assignRoleNameToUser({
- userId,
- roleName: defaultRoleName,
- grantedBy: userId,
- });
- } catch {
- /* */
- }
-
- try {
- const sessionDurationMs =
- deviceInfo.type === "desktop" || deviceInfo.type === "mobile"
- ? 30 * 24 * 60 * 60 * 1000
- : 24 * 60 * 60 * 1000;
- await authManager.registerOIDCUser(userId, sessionDurationMs);
- } catch (encryptionError) {
- await userRepository.delete(userId);
- authLogger.error(
- "Failed to setup LDAP user encryption",
- encryptionError,
- );
- return res
- .status(500)
- .json({ error: "Failed to setup user security" });
- }
-
- existingUser = await userRepository.findById(userId);
- if (!existingUser) {
- throw new Error("Created LDAP user could not be loaded");
- }
- } else {
- userId = existingUser.id;
-
- // Sync admin status from group membership
- if (config.adminGroup && !!existingUser.isAdmin !== isAdmin) {
- existingUser =
- (await userRepository.update(userId, { isAdmin })) ?? existingUser;
- try {
- const newRoleName = isAdmin ? "admin" : "user";
- const oldRoleName = isAdmin ? "user" : "admin";
- await createCurrentRoleRepository().switchUserRoleName({
- userId,
- addRoleName: newRoleName,
- removeRoleName: oldRoleName,
- grantedBy: userId,
- });
- } catch {
- /* non-fatal */
- }
- }
-
- // Update display name if not dual-auth
- const isDualAuth =
- existingUser.passwordHash && existingUser.passwordHash.trim() !== "";
- if (!isDualAuth && existingUser.username !== displayName) {
- existingUser =
- (await userRepository.update(userId, { username: displayName })) ??
- existingUser;
- }
- }
-
- const userRecord = existingUser;
- try {
- await authManager.authenticateOIDCUser(userRecord.id, deviceInfo.type);
- } catch {
- /* */
- }
-
- const token = await authManager.generateJWTToken(userRecord.id, {
- deviceType: deviceInfo.type,
- deviceInfo: deviceInfo.deviceInfo,
- rememberMe: rememberMe || false,
+ const identity = await verifyLdapLogin({ body: req.body, ip: req.ip });
+ await respondWithLogin(req, res, identity, {
+ methodId: "ldap",
+ rememberMe: !!req.body?.rememberMe,
});
-
- authLogger.success("LDAP login successful", {
- operation: "ldap_login_complete",
- userId: userRecord.id,
- username: userRecord.username,
- });
-
- const maxAge =
- deviceInfo.type === "desktop" || deviceInfo.type === "mobile"
- ? 30 * 24 * 60 * 60 * 1000
- : rememberMe
- ? 30 * 24 * 60 * 60 * 1000
- : 24 * 60 * 60 * 1000;
-
- res.clearCookie("jwt", authManager.getClearCookieOptions(req));
- return res
- .cookie("jwt", token, authManager.getSecureCookieOptions(req, maxAge))
- .json({ success: true, message: "Login successful" });
- } catch (err) {
- ldapUnbind(serviceClient);
- authLogger.error("LDAP login failed", err);
- return res.status(500).json({ error: "LDAP authentication failed" });
+ } catch (error) {
+ sendLoginError(res, error);
}
});
}
diff --git a/src/backend/database/routes/plugin-api-routes.ts b/src/backend/database/routes/plugin-api-routes.ts
index 974b09f0d..18d144a8b 100644
--- a/src/backend/database/routes/plugin-api-routes.ts
+++ b/src/backend/database/routes/plugin-api-routes.ts
@@ -69,4 +69,13 @@ router.use("/:pluginId", (req: Request, res: Response, next) => {
pluginRouter(req, res, next);
});
+/**
+ * Mounts the dispatcher. No auth in front of it: each plugin router runs
+ * core auth itself and skips it only for the paths it declared public, so a
+ * webhook or OIDC callback a plugin serves can actually be reached.
+ */
+export function mountPluginApi(app: express.Express): void {
+ app.use("/plugin-api", router);
+}
+
export default router;
diff --git a/src/backend/database/routes/plugins.ts b/src/backend/database/routes/plugins.ts
index f8c491fb7..cdadd822e 100644
--- a/src/backend/database/routes/plugins.ts
+++ b/src/backend/database/routes/plugins.ts
@@ -104,6 +104,72 @@ router.get("/public", async (_req: Request, res: Response) => {
}
});
+/**
+ * @openapi
+ * /plugins/public-manifest:
+ * get:
+ * summary: List the plugin frontends the login screen needs
+ * description: >
+ * No auth. The login screen draws login methods and second-factor steps
+ * that plugins provide, before anyone has signed in. Returns only
+ * enabled plugins that contribute login methods or second factors, with
+ * the fields the browser loader needs and the ids they contribute.
+ * Nothing operational: no capabilities, grants, settings or errors.
+ * tags:
+ * - Plugins
+ * responses:
+ * 200:
+ * description: Login-capable plugins.
+ */
+router.get("/public-manifest", async (_req: Request, res: Response) => {
+ try {
+ res.json(await listPreLoginPlugins());
+ } catch (error) {
+ databaseLogger.error(
+ "Failed to list login plugins",
+ error instanceof Error ? error : new Error(String(error)),
+ { operation: "plugin_list_public_manifest" },
+ );
+ res.status(500).json({ error: "Failed to list plugins" });
+ }
+});
+
+/** Enabled plugins with login or second-factor UI, without admin data. */
+export async function listPreLoginPlugins(): Promise<
+ Array>
+> {
+ const records = await createCurrentPluginRepository().listAll();
+ const { loader } = getPluginRuntime();
+ return records.flatMap((record) => {
+ if (record.state !== "enabled") return [];
+ const loaded = loader.get(record.id);
+ if (loaded?.state !== "active") return [];
+ let manifest: PluginManifest;
+ try {
+ manifest = JSON.parse(record.manifestJson) as PluginManifest;
+ } catch {
+ return [];
+ }
+ const auth = manifest?.contributes?.auth;
+ const loginMethods = auth?.loginMethods ?? [];
+ const secondFactors = auth?.secondFactors ?? [];
+ if (loginMethods.length === 0 && secondFactors.length === 0) return [];
+ return [
+ {
+ id: record.id,
+ name: record.name,
+ version: record.version,
+ enabled: true,
+ state: loaded.state,
+ contributes: { auth: { loginMethods, secondFactors } },
+ dependencies: manifest.dependencies ?? {},
+ optionalDependencies: manifest.optionalDependencies ?? {},
+ ...describePluginFrontend(loaded),
+ },
+ ];
+ });
+}
+
/**
* @openapi
* /plugins:
diff --git a/src/backend/database/routes/snippets.ts b/src/backend/database/routes/snippets.ts
index 3c95ab601..8929623e8 100644
--- a/src/backend/database/routes/snippets.ts
+++ b/src/backend/database/routes/snippets.ts
@@ -4,7 +4,8 @@ import express, { type Request, type Response } from "express";
import { authLogger, databaseLogger } from "../../utils/logger.js";
import { PermissionManager } from "../../utils/permission-manager.js";
import { AuthManager } from "../../utils/auth-manager.js";
-import { SSH_ALGORITHMS } from "../../utils/ssh-algorithms.js";
+import { connectHost } from "../../hosts/connect/connect-host.js";
+import type { SshConnectHost } from "../../hosts/connect/types.js";
import { extractSnippetReorderUpdates } from "./snippets-reorder.js";
import {
createSnippetExecutionResult,
@@ -586,22 +587,12 @@ router.post(
.json({ error: "Notes cannot be executed on a host" });
}
- const { Client } = await import("ssh2");
const host = await resolveHostById(parseInt(hostId), userId);
if (!host) {
return res.status(404).json({ error: "Host not found" });
}
- const password = host.password;
- const privateKey = host.key;
- const passphrase = host.keyPassword;
- const authType = host.authType;
-
- const conn = new Client();
- let output = "";
- let errorOutput = "";
-
const resolvedCommand = resolveSnippetCommand(
snippet.content,
{
@@ -613,6 +604,13 @@ router.post(
inputValues && typeof inputValues === "object" ? inputValues : {},
);
+ const { client: conn } = await connectHost(
+ host as unknown as SshConnectHost,
+ { userId, purpose: "snippet", timeoutMs: 30000 },
+ );
+ let output = "";
+ let errorOutput = "";
+
const executePromise = new Promise<{
success: boolean;
output: string;
@@ -621,130 +619,42 @@ router.post(
const timeoutMs = getSnippetExecutionTimeoutMs();
let timeout: NodeJS.Timeout | undefined;
- conn.on("ready", () => {
- conn.exec(resolvedCommand, (err, stream) => {
- if (err) {
- clearTimeout(timeout);
- conn.end();
- return reject(err);
- }
-
- if (timeoutMs) {
- timeout = setTimeout(() => {
- conn.end();
- reject(
- new Error(`Command execution timeout (${timeoutMs / 1000}s)`),
- );
- }, timeoutMs);
- }
-
- stream.on("close", (exitCode: number | null) => {
- clearTimeout(timeout);
- conn.end();
- resolve(
- createSnippetExecutionResult(exitCode, output, errorOutput),
- );
- });
-
- stream.on("data", (data: Buffer) => {
- output += data.toString();
- });
-
- stream.stderr.on("data", (data: Buffer) => {
- errorOutput += data.toString();
- });
- });
- });
-
conn.on("error", (err) => {
clearTimeout(timeout);
reject(err);
});
- const config: Record = {
- host: host.ip,
- port: host.port,
- username: host.username,
- tryKeyboard: true,
- keepaliveInterval: 30000,
- keepaliveCountMax: 3,
- readyTimeout: 30000,
- tcpKeepAlive: true,
- tcpKeepAliveInitialDelay: 30000,
- timeout: 30000,
- env: {
- TERM: "xterm-256color",
- LANG: "en_US.UTF-8",
- LC_ALL: "en_US.UTF-8",
- LC_CTYPE: "en_US.UTF-8",
- LC_MESSAGES: "en_US.UTF-8",
- LC_MONETARY: "en_US.UTF-8",
- LC_NUMERIC: "en_US.UTF-8",
- LC_TIME: "en_US.UTF-8",
- LC_COLLATE: "en_US.UTF-8",
- COLORTERM: "truecolor",
- },
- algorithms: {
- kex: [
- "curve25519-sha256",
- "curve25519-sha256@libssh.org",
- "ecdh-sha2-nistp521",
- "ecdh-sha2-nistp384",
- "ecdh-sha2-nistp256",
- "diffie-hellman-group-exchange-sha256",
- "diffie-hellman-group14-sha256",
- "diffie-hellman-group14-sha1",
- "diffie-hellman-group-exchange-sha1",
- "diffie-hellman-group1-sha1",
- ],
- serverHostKey: [
- "ssh-ed25519",
- "ecdsa-sha2-nistp521",
- "ecdsa-sha2-nistp384",
- "ecdsa-sha2-nistp256",
- "rsa-sha2-512",
- "rsa-sha2-256",
- "ssh-rsa",
- "ssh-dss",
- ],
- cipher: SSH_ALGORITHMS.cipher,
- hmac: [
- "hmac-sha2-512-etm@openssh.com",
- "hmac-sha2-256-etm@openssh.com",
- "hmac-sha2-512",
- "hmac-sha2-256",
- "hmac-sha1",
- "hmac-md5",
- ],
- compress: ["none", "zlib@openssh.com", "zlib"],
- },
- };
-
- if (authType === "password" && password) {
- config.password = password;
- } else if (authType === "key" && privateKey) {
- const cleanKey = (privateKey as string)
- .trim()
- .replace(/\r\n/g, "\n")
- .replace(/\r/g, "\n");
- config.privateKey = Buffer.from(cleanKey, "utf8");
- if (passphrase) {
- config.passphrase = passphrase;
+ conn.exec(resolvedCommand, (err, stream) => {
+ if (err) {
+ conn.end();
+ return reject(err);
}
- } else if (password) {
- config.password = password;
- } else if (privateKey) {
- const cleanKey = (privateKey as string)
- .trim()
- .replace(/\r\n/g, "\n")
- .replace(/\r/g, "\n");
- config.privateKey = Buffer.from(cleanKey, "utf8");
- if (passphrase) {
- config.passphrase = passphrase;
- }
- }
- conn.connect(config);
+ if (timeoutMs) {
+ timeout = setTimeout(() => {
+ conn.end();
+ reject(
+ new Error(`Command execution timeout (${timeoutMs / 1000}s)`),
+ );
+ }, timeoutMs);
+ }
+
+ stream.on("close", (exitCode: number | null) => {
+ clearTimeout(timeout);
+ conn.end();
+ resolve(
+ createSnippetExecutionResult(exitCode, output, errorOutput),
+ );
+ });
+
+ stream.on("data", (data: Buffer) => {
+ output += data.toString();
+ });
+
+ stream.stderr.on("data", (data: Buffer) => {
+ errorOutput += data.toString();
+ });
+ });
});
const result = await executePromise;
diff --git a/src/backend/database/routes/ssh-auth-routes.ts b/src/backend/database/routes/ssh-auth-routes.ts
new file mode 100644
index 000000000..066726041
--- /dev/null
+++ b/src/backend/database/routes/ssh-auth-routes.ts
@@ -0,0 +1,78 @@
+import express, { type Request, type Response } from "express";
+import { AuthManager } from "../../utils/auth-manager.js";
+import {
+ listSshAuthProviders,
+ listSshAuthTypeOwners,
+} from "../../hosts/connect/auth-provider-registry.js";
+import { ensureCoreSshAuthProviders } from "../../hosts/connect/core-providers.js";
+
+const router = express.Router();
+const authenticateJWT = AuthManager.getInstance().createAuthMiddleware();
+
+export interface SshAuthProviderSummary {
+ type: string;
+ labelKey: string;
+ descriptionKey?: string;
+ pluginId: string;
+ fields: unknown[];
+ credentialType: boolean;
+ needsUserInteraction: boolean;
+ supportsBackground: boolean;
+ available: boolean;
+ /** Set when the type belongs to a plugin that is disabled or missing. */
+ missingPlugin?: { id: string; name: string };
+}
+
+export function summarizeSshAuthProviders(): SshAuthProviderSummary[] {
+ ensureCoreSshAuthProviders();
+ const summaries: SshAuthProviderSummary[] = listSshAuthProviders().map(
+ (provider) => ({
+ type: provider.type,
+ labelKey: provider.labelKey,
+ descriptionKey: provider.descriptionKey,
+ pluginId: provider.pluginId,
+ fields: provider.fields ?? [],
+ credentialType: !!provider.credentialType,
+ needsUserInteraction: !!provider.needsUserInteraction,
+ supportsBackground: provider.supportsBackground !== false,
+ available: true,
+ }),
+ );
+
+ const known = new Set(summaries.map((summary) => summary.type));
+ for (const owner of listSshAuthTypeOwners()) {
+ if (known.has(owner.type)) continue;
+ summaries.push({
+ type: owner.type,
+ labelKey: "",
+ pluginId: owner.pluginId,
+ fields: [],
+ credentialType: false,
+ needsUserInteraction: false,
+ supportsBackground: false,
+ available: false,
+ missingPlugin: { id: owner.pluginId, name: owner.pluginName },
+ });
+ }
+ return summaries;
+}
+
+/**
+ * @openapi
+ * /ssh-auth/providers:
+ * get:
+ * summary: List SSH auth types
+ * description: Every SSH auth type the server can connect with, from core and from plugins, plus types declared by plugins that are disabled so the host editor can explain them.
+ * tags:
+ * - SSH Auth
+ * responses:
+ * 200:
+ * description: Auth type list.
+ * 401:
+ * description: Not authenticated.
+ */
+router.get("/providers", authenticateJWT, (_req: Request, res: Response) => {
+ res.json({ providers: summarizeSshAuthProviders() });
+});
+
+export default router;
diff --git a/src/backend/database/routes/sso-provider-routes.ts b/src/backend/database/routes/sso-provider-routes.ts
index b2c5663f8..985a8bc89 100644
--- a/src/backend/database/routes/sso-provider-routes.ts
+++ b/src/backend/database/routes/sso-provider-routes.ts
@@ -94,6 +94,26 @@ function applyProviderDefaults(
return config;
}
+/** Enabled providers as the login screen sees them: no secrets. */
+export async function listPublicSsoProviders(): Promise<
+ Array<{ id: number; name: string; type: string; displayOrder: number }>
+> {
+ const envConfig = getOIDCConfigFromEnv();
+ if (envConfig && isOIDCEnvOverrideEnabled()) {
+ return [{ id: 0, name: "SSO", type: "oidc", displayOrder: 0 }];
+ }
+
+ const providers =
+ await createCurrentSsoProviderRepository().listEnabledPublic();
+
+ // With no provider rows, synthesize one from env vars so SSO login stays
+ // available when it is configured purely through the environment.
+ if (providers.length === 0 && envConfig) {
+ providers.push({ id: 0, name: "SSO", type: "oidc", displayOrder: 0 });
+ }
+ return providers;
+}
+
export function registerSSOProviderRoutes(router: Router): void {
const requireAdmin = authManager.createAdminMiddleware();
@@ -111,25 +131,7 @@ export function registerSSOProviderRoutes(router: Router): void {
*/
router.get("/sso-providers", async (_req, res) => {
try {
- const envConfig = getOIDCConfigFromEnv();
- if (envConfig && isOIDCEnvOverrideEnabled()) {
- return res.json([
- { id: 0, name: "SSO", type: "oidc", displayOrder: 0 },
- ]);
- }
-
- const providers =
- await createCurrentSsoProviderRepository().listEnabledPublic();
-
- // If no DB providers exist, synthesize one from env vars so SSO login
- // remains available when configured purely via environment variables.
- if (providers.length === 0) {
- if (envConfig) {
- providers.push({ id: 0, name: "SSO", type: "oidc", displayOrder: 0 });
- }
- }
-
- res.json(providers);
+ res.json(await listPublicSsoProviders());
} catch (err) {
authLogger.error("Failed to list SSO providers", err);
res.status(500).json({ error: "Failed to list SSO providers" });
diff --git a/src/backend/database/routes/user-admin-routes.ts b/src/backend/database/routes/user-admin-routes.ts
index fc7250fdf..7ea85d77b 100644
--- a/src/backend/database/routes/user-admin-routes.ts
+++ b/src/backend/database/routes/user-admin-routes.ts
@@ -9,8 +9,13 @@ import { AuthManager } from "../../utils/auth-manager.js";
import { DataCrypto } from "../../utils/data-crypto.js";
import {
createCurrentRoleRepository,
+ createCurrentUserAuthRepository,
createCurrentUserRepository,
} from "../repositories/factory.js";
+import {
+ listUserSecondFactors,
+ resetUserSecondFactors,
+} from "../../auth/second-factor-admin.js";
import type {
UserRecord,
UserRepository,
@@ -730,6 +735,11 @@ export function registerUserAdminRoutes(
totpEnabled: false,
totpBackupCodes: null,
});
+ await createCurrentUserAuthRepository().removeSecondFactor(
+ targetUser.id,
+ "core",
+ "totp",
+ );
try {
await DatabaseSaveTrigger.forceSave("admin_disable_totp");
@@ -760,6 +770,126 @@ export function registerUserAdminRoutes(
}
});
+ /**
+ * @openapi
+ * /users/admin/{userId}/second-factors:
+ * get:
+ * summary: List a user's second factors (admin only)
+ * description: Every second factor the user is enrolled in, and whether the plugin behind it is running.
+ * tags:
+ * - Users
+ * parameters:
+ * - in: path
+ * name: userId
+ * required: true
+ * schema:
+ * type: string
+ * responses:
+ * 200:
+ * description: Enrolled factors.
+ * 403:
+ * description: Admin access required.
+ * 404:
+ * description: User not found.
+ */
+ router.get(
+ "/admin/:userId/second-factors",
+ authenticateJWT,
+ async (req, res) => {
+ const adminId = (req as AuthenticatedRequest).userId;
+ try {
+ const userRepository = createCurrentUserRepository();
+ const adminUser = await userRepository.findById(adminId);
+ if (!adminUser?.isAdmin) {
+ return res.status(403).json({ error: "Admin access required" });
+ }
+ const targetUser = await userRepository.findById(
+ String(req.params.userId),
+ );
+ if (!targetUser) {
+ return res.status(404).json({ error: "User not found" });
+ }
+ res.json({ factors: await listUserSecondFactors(targetUser.id) });
+ } catch (err) {
+ authLogger.error("Failed to list second factors", err);
+ res.status(500).json({ error: "Failed to list second factors" });
+ }
+ },
+ );
+
+ /**
+ * @openapi
+ * /users/admin/{userId}/second-factors:
+ * delete:
+ * summary: Reset a user's second factors (admin only)
+ * description: Removes every second factor the user enrolled in, including ones whose plugin is disabled or missing, and forgets their trusted devices. The user can sign in with their first factor and enrol again.
+ * tags:
+ * - Users
+ * parameters:
+ * - in: path
+ * name: userId
+ * required: true
+ * schema:
+ * type: string
+ * responses:
+ * 200:
+ * description: Second factors reset.
+ * 403:
+ * description: Admin access required.
+ * 404:
+ * description: User not found.
+ */
+ router.delete(
+ "/admin/:userId/second-factors",
+ authenticateJWT,
+ async (req, res) => {
+ const adminId = (req as AuthenticatedRequest).userId;
+ try {
+ const userRepository = createCurrentUserRepository();
+ const adminUser = await userRepository.findById(adminId);
+ if (!adminUser?.isAdmin) {
+ return res.status(403).json({ error: "Admin access required" });
+ }
+ const targetUser = await userRepository.findById(
+ String(req.params.userId),
+ );
+ if (!targetUser) {
+ return res.status(404).json({ error: "User not found" });
+ }
+
+ const removed = await resetUserSecondFactors(targetUser.id);
+
+ try {
+ await DatabaseSaveTrigger.forceSave("admin_reset_second_factors");
+ } catch (saveError) {
+ authLogger.error("Failed to persist second factor reset", saveError, {
+ operation: "admin_reset_second_factors_save_failed",
+ userId: targetUser.id,
+ });
+ }
+
+ const { ipAddress, userAgent } = getRequestMeta(req);
+ await logAudit({
+ userId: adminId,
+ username: adminUser.username ?? adminId,
+ action: "admin_reset_second_factors",
+ resourceType: "user",
+ resourceId: targetUser.id,
+ resourceName: targetUser.username,
+ details: JSON.stringify({ removed }),
+ ipAddress,
+ userAgent,
+ success: true,
+ });
+
+ res.json({ message: "Second factors reset", removed });
+ } catch (err) {
+ authLogger.error("Failed to reset second factors", err);
+ res.status(500).json({ error: "Failed to reset second factors" });
+ }
+ },
+ );
+
/**
* @openapi
* /users/admin/export/{userId}:
diff --git a/src/backend/database/routes/user-oidc-account-routes.ts b/src/backend/database/routes/user-oidc-account-routes.ts
index 7f72eb529..cce1bcccf 100644
--- a/src/backend/database/routes/user-oidc-account-routes.ts
+++ b/src/backend/database/routes/user-oidc-account-routes.ts
@@ -4,7 +4,10 @@ import type { RequestHandler, Router } from "express";
import { AuthManager } from "../../utils/auth-manager.js";
import { DatabaseSaveTrigger } from "../../utils/database-save-trigger.js";
import { authLogger } from "../../utils/logger.js";
-import { createCurrentUserRepository } from "../repositories/factory.js";
+import {
+ createCurrentUserRepository,
+ createCurrentUserAuthRepository,
+} from "../repositories/factory.js";
import { deleteUserAndRelatedData } from "./delete-user-data.js";
type UserOidcAccountRoutesDeps = {
@@ -120,6 +123,12 @@ export function registerUserOidcAccountRoutes(
scopes: oidcUser.scopes || "openid email profile",
});
+ // Identities hang off the user row and would go with it.
+ await createCurrentUserAuthRepository().moveIdentities(
+ oidcUserId,
+ targetUser.id,
+ );
+
await authManager.revokeAllUserSessions(oidcUserId);
authManager.logoutUser(oidcUserId);
@@ -265,6 +274,9 @@ export function registerUserOidcAccountRoutes(
namePath: "",
scopes: "openid email profile",
});
+ await createCurrentUserAuthRepository().unlinkIdentitiesForUser(
+ targetUser.id,
+ );
try {
await DatabaseSaveTrigger.forceSave("unlink_oidc_explicit_save");
diff --git a/src/backend/database/routes/user-totp-routes.ts b/src/backend/database/routes/user-totp-routes.ts
index 6e055c117..a702dda4f 100644
--- a/src/backend/database/routes/user-totp-routes.ts
+++ b/src/backend/database/routes/user-totp-routes.ts
@@ -1,6 +1,7 @@
import type { AuthenticatedRequest } from "../../../types/index.js";
import type { Request, RequestHandler, Router } from "express";
import bcrypt from "bcryptjs";
+import crypto from "crypto";
import QRCode from "qrcode";
import speakeasy from "speakeasy";
import { AuthManager } from "../../utils/auth-manager.js";
@@ -8,16 +9,14 @@ import { DatabaseSaveTrigger } from "../../utils/database-save-trigger.js";
import { FieldCrypto } from "../../utils/field-crypto.js";
import { LazyFieldEncryption } from "../../utils/lazy-field-encryption.js";
import { authLogger } from "../../utils/logger.js";
-import { loginRateLimiter } from "../../utils/login-rate-limiter.js";
import { isTrustedProxyAuthEnabled } from "../../utils/trusted-proxy-auth.js";
+
+import { isPasswordLoginSettingOn } from "../../auth/core-auth.js";
+import { verifySecondFactorAndRespond } from "../../auth/login-pipeline.js";
+import { TOTP_FACTOR_ID } from "../../auth/legacy/totp-factor.js";
import {
- generateDeviceFingerprint,
- getDeviceId,
- parseUserAgent,
-} from "../../utils/user-agent-parser.js";
-import {
+ createCurrentUserAuthRepository,
createCurrentSessionRepository,
- createCurrentSettingsRepository,
createCurrentTrustedDeviceRepository,
createCurrentUserRepository,
} from "../repositories/factory.js";
@@ -31,6 +30,17 @@ interface UserTotpRoutesDeps {
isNativeAppRequest: NativeAppRequestChecker;
}
+const BACKUP_CODE_ALPHABET = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789";
+
+/** Eight characters from a CSPRNG; Math.random is not fit for secrets. */
+export function generateBackupCode(): string {
+ let code = "";
+ for (let i = 0; i < 8; i++) {
+ code += BACKUP_CODE_ALPHABET[crypto.randomInt(BACKUP_CODE_ALPHABET.length)];
+ }
+ return code;
+}
+
export async function verifyTotpReauth(
userRecord: UserRecord,
credential: string,
@@ -245,11 +255,7 @@ export function registerUserTotpRoutes(
}
try {
- const passwordLoginAllowed =
- await createCurrentSettingsRepository().getBoolean(
- "allow_password_login",
- true,
- );
+ const passwordLoginAllowed = isPasswordLoginSettingOn();
if (!passwordLoginAllowed) {
return res.status(409).json({
error:
@@ -291,9 +297,7 @@ export function registerUserTotpRoutes(
return res.status(401).json({ error: "Invalid TOTP code" });
}
- const backupCodes = Array.from({ length: 8 }, () =>
- Math.random().toString(36).substring(2, 10).toUpperCase(),
- );
+ const backupCodes = Array.from({ length: 8 }, () => generateBackupCode());
const backupCodesJson = JSON.stringify(backupCodes);
const storedBackupCodes = userDataKey
@@ -309,6 +313,11 @@ export function registerUserTotpRoutes(
totpEnabled: true,
totpBackupCodes: storedBackupCodes,
});
+ await createCurrentUserAuthRepository().recordSecondFactor(
+ userId,
+ "core",
+ TOTP_FACTOR_ID,
+ );
await createCurrentSessionRepository().revokeAllForUser(
userId,
@@ -419,6 +428,11 @@ export function registerUserTotpRoutes(
totpSecret: null,
totpBackupCodes: null,
});
+ await createCurrentUserAuthRepository().removeSecondFactor(
+ userId,
+ "core",
+ TOTP_FACTOR_ID,
+ );
authLogger.info("Two-factor authentication disabled", {
operation: "totp_disable",
userId,
@@ -503,9 +517,7 @@ export function registerUserTotpRoutes(
.json({ error: "Incorrect password or invalid TOTP code" });
}
- const backupCodes = Array.from({ length: 8 }, () =>
- Math.random().toString(36).substring(2, 10).toUpperCase(),
- );
+ const backupCodes = Array.from({ length: 8 }, () => generateBackupCode());
const backupCodesJson = JSON.stringify(backupCodes);
const storedBackupCodes = userDataKey
@@ -560,180 +572,13 @@ export function registerUserTotpRoutes(
* description: TOTP verification failed.
*/
router.post("/totp/verify-login", async (req, res) => {
- const { temp_token, totp_code, rememberMe } = req.body;
-
- if (!temp_token || !totp_code) {
+ if (!req.body?.temp_token || !req.body?.totp_code) {
return res
.status(400)
.json({ error: "Token and TOTP code are required" });
}
-
try {
- const decoded = await authManager.verifyJWTToken(temp_token);
- if (!decoded || !decoded.pendingTOTP) {
- return res.status(401).json({ error: "Invalid temporary token" });
- }
-
- const userRecord = await createCurrentUserRepository().findById(
- decoded.userId,
- );
- if (!userRecord) {
- return res.status(404).json({ error: "User not found" });
- }
-
- const lockStatus = loginRateLimiter.isTOTPLocked(userRecord.id);
- if (lockStatus.locked) {
- authLogger.warn("TOTP verification blocked due to rate limiting", {
- operation: "totp_verify_blocked",
- userId: userRecord.id,
- remainingTime: lockStatus.remainingTime,
- });
- return res.status(429).json({
- error: `Rate limited: Too many TOTP verification attempts. Please wait ${lockStatus.remainingTime} seconds before trying again.`,
- remainingTime: lockStatus.remainingTime,
- code: "TOTP_RATE_LIMITED",
- });
- }
-
- loginRateLimiter.recordFailedTOTPAttempt(userRecord.id);
-
- if (!userRecord.totpEnabled || !userRecord.totpSecret) {
- return res
- .status(400)
- .json({ error: "TOTP not enabled for this user" });
- }
-
- const userDataKey = authManager.getUserDataKey(userRecord.id);
- if (!userDataKey) {
- return res.status(401).json({
- error: "Session expired - please log in again",
- code: "SESSION_EXPIRED",
- });
- }
-
- const totpSecret = LazyFieldEncryption.safeGetFieldValue(
- userRecord.totpSecret,
- userDataKey,
- userRecord.id,
- "totp_secret",
- );
-
- if (!totpSecret) {
- await createCurrentUserRepository().update(userRecord.id, {
- totpEnabled: false,
- totpSecret: null,
- totpBackupCodes: null,
- });
-
- return res.status(400).json({
- error:
- "TOTP has been disabled due to password reset. Please set up TOTP again.",
- });
- }
-
- const verified = speakeasy.totp.verify({
- secret: totpSecret,
- encoding: "base32",
- token: totp_code,
- window: 2,
- });
-
- if (!verified) {
- let backupCodes = [];
- try {
- backupCodes = userRecord.totpBackupCodes
- ? JSON.parse(userRecord.totpBackupCodes)
- : [];
- } catch {
- backupCodes = [];
- }
-
- if (!Array.isArray(backupCodes)) {
- backupCodes = [];
- }
-
- const backupIndex = backupCodes.indexOf(totp_code);
-
- if (backupIndex === -1) {
- authLogger.warn("TOTP verification failed - invalid code", {
- operation: "totp_verify_failed",
- userId: userRecord.id,
- remainingAttempts: loginRateLimiter.getRemainingTOTPAttempts(
- userRecord.id,
- ),
- });
- return res.status(401).json({
- error: "Invalid TOTP code",
- remainingAttempts: loginRateLimiter.getRemainingTOTPAttempts(
- userRecord.id,
- ),
- });
- }
-
- backupCodes.splice(backupIndex, 1);
- await createCurrentUserRepository().update(userRecord.id, {
- totpBackupCodes: JSON.stringify(backupCodes),
- });
- }
-
- loginRateLimiter.resetTOTPAttempts(userRecord.id);
-
- const deviceInfo = parseUserAgent(req);
-
- if (rememberMe) {
- const deviceFingerprint = generateDeviceFingerprint(
- deviceInfo,
- getDeviceId(req),
- );
- if (deviceFingerprint) {
- await authManager.addTrustedDevice(
- userRecord.id,
- deviceFingerprint,
- deviceInfo.type,
- deviceInfo.deviceInfo,
- );
- authLogger.info("Device automatically trusted via Remember Me", {
- operation: "totp_auto_trust",
- userId: userRecord.id,
- deviceType: deviceInfo.type,
- });
- }
- }
-
- const token = await authManager.generateJWTToken(userRecord.id, {
- rememberMe: !!rememberMe,
- deviceType: deviceInfo.type,
- deviceInfo: deviceInfo.deviceInfo,
- });
-
- authLogger.success("TOTP verification successful", {
- operation: "totp_verify_success",
- userId: userRecord.id,
- deviceType: deviceInfo.type,
- deviceInfo: deviceInfo.deviceInfo,
- });
-
- const response: Record = {
- success: true,
- is_admin: !!userRecord.isAdmin,
- username: userRecord.username,
- userId: userRecord.id,
- is_oidc: !!userRecord.isOidc,
- totp_enabled: !!userRecord.totpEnabled,
- ...(isNativeAppRequest(req) ? { token } : {}),
- };
-
- const timeoutValue = await createCurrentSettingsRepository().get(
- "session_timeout_hours",
- );
- const timeoutHours = timeoutValue ? parseInt(timeoutValue, 10) || 24 : 24;
- const maxAge = rememberMe
- ? 30 * 24 * 60 * 60 * 1000
- : timeoutHours * 60 * 60 * 1000;
-
- return res
- .cookie("jwt", token, authManager.getSecureCookieOptions(req, maxAge))
- .json(response);
+ await verifySecondFactorAndRespond(req, res, TOTP_FACTOR_ID);
} catch (err) {
authLogger.error("TOTP verification failed", err);
return res.status(500).json({ error: "TOTP verification failed" });
diff --git a/src/backend/database/routes/user-webauthn-routes.ts b/src/backend/database/routes/user-webauthn-routes.ts
index 848606a0e..5720413f6 100644
--- a/src/backend/database/routes/user-webauthn-routes.ts
+++ b/src/backend/database/routes/user-webauthn-routes.ts
@@ -17,17 +17,14 @@ import { nanoid } from "nanoid";
import type { AuthenticatedRequest } from "../../../types/index.js";
import { AuthManager } from "../../utils/auth-manager.js";
import { authLogger } from "../../utils/logger.js";
-import {
- generateDeviceFingerprint,
- getDeviceId,
- parseUserAgent,
-} from "../../utils/user-agent-parser.js";
+
import {
createCurrentUserRepository,
createCurrentWebauthnCredentialRepository,
- getCurrentSettingValue,
} from "../repositories/factory.js";
import type { WebauthnCredentialRecord } from "../repositories/webauthn-credential-repository.js";
+import { respondWithLogin, sendLoginError } from "../../auth/login-pipeline.js";
+import { LoginMethodError, type VerifiedIdentity } from "../../auth/types.js";
type UserVerification = "discouraged" | "preferred" | "required";
type NativeAppRequestChecker = (req: Request) => boolean;
@@ -130,6 +127,82 @@ function getCredentialForVerification(
};
}
+/**
+ * Checks a passkey assertion and says who signed in. A passkey that verified
+ * the user (PIN or biometric) counts as the second factor too.
+ */
+export async function verifyPasskeyLogin(
+ req: Request,
+): Promise {
+ const challenge = takeChallenge(
+ authenticationChallenges,
+ req.body?.challengeId,
+ );
+ if (!challenge) {
+ throw new LoginMethodError("Authentication challenge expired", 400);
+ }
+
+ const response = req.body?.response as AuthenticationResponseJSON | undefined;
+ if (!response?.id) {
+ throw new LoginMethodError("Invalid passkey response", 400);
+ }
+
+ const credential =
+ await createCurrentWebauthnCredentialRepository().findByCredentialId(
+ response.id,
+ );
+ if (!credential) {
+ throw new LoginMethodError("Passkey not recognized", 401);
+ }
+ if (challenge.userId && challenge.userId !== credential.userId) {
+ throw new LoginMethodError("Passkey not recognized", 401);
+ }
+
+ let verification: Awaited>;
+ try {
+ verification = await verifyAuthenticationResponse({
+ response,
+ expectedChallenge: challenge.challenge,
+ expectedOrigin: challenge.origin,
+ expectedRPID: challenge.rpID,
+ credential: getCredentialForVerification(credential),
+ requireUserVerification: challenge.userVerification === "required",
+ advancedFIDOConfig: { userVerification: challenge.userVerification },
+ });
+ } catch (error) {
+ authLogger.warn("WebAuthn authentication failed", {
+ operation: "webauthn_auth_verify",
+ credentialId: credential.id,
+ userId: credential.userId,
+ error: getErrorMessage(error, "Unknown"),
+ });
+ throw new LoginMethodError("Passkey authentication failed", 401);
+ }
+
+ if (!verification.verified) {
+ throw new LoginMethodError("Passkey authentication failed", 401);
+ }
+
+ await createCurrentWebauthnCredentialRepository().updateAuthState(
+ credential.id,
+ {
+ counter: verification.authenticationInfo.newCounter,
+ backedUp: verification.authenticationInfo.credentialBackedUp,
+ deviceType: verification.authenticationInfo.credentialDeviceType,
+ lastUsedAt: new Date().toISOString(),
+ },
+ );
+
+ return {
+ kind: "user",
+ userId: credential.userId,
+ mfaSatisfied: verification.authenticationInfo.userVerified === true,
+ rememberMe: !!req.body?.rememberMe,
+ unlockError:
+ "Passkey cannot unlock this account. Log in with password and register the passkey again.",
+ };
+}
+
export function registerUserWebAuthnRoutes(
router: Router,
{ authenticateJWT, authManager, isNativeAppRequest }: WebAuthnRoutesDeps,
@@ -412,140 +485,14 @@ export function registerUserWebAuthnRoutes(
* description: Passkey not recognized or authentication failed.
*/
router.post("/webauthn/authenticate/verify", async (req, res) => {
- const challenge = takeChallenge(
- authenticationChallenges,
- req.body?.challengeId,
- );
- if (!challenge) {
- return res
- .status(400)
- .json({ error: "Authentication challenge expired" });
- }
-
- const response = req.body?.response as
- AuthenticationResponseJSON | undefined;
- if (!response?.id) {
- return res.status(400).json({ error: "Invalid passkey response" });
- }
-
- const credential =
- await createCurrentWebauthnCredentialRepository().findByCredentialId(
- response.id,
- );
-
- if (!credential) {
- return res.status(401).json({ error: "Passkey not recognized" });
- }
-
- if (challenge.userId && challenge.userId !== credential.userId) {
- return res.status(401).json({ error: "Passkey not recognized" });
- }
-
try {
- const verification = await verifyAuthenticationResponse({
- response,
- expectedChallenge: challenge.challenge,
- expectedOrigin: challenge.origin,
- expectedRPID: challenge.rpID,
- credential: getCredentialForVerification(credential),
- requireUserVerification: challenge.userVerification === "required",
- advancedFIDOConfig: {
- userVerification: challenge.userVerification,
- },
- });
-
- if (!verification.verified) {
- return res.status(401).json({ error: "Passkey authentication failed" });
- }
-
- const userRecord = await createCurrentUserRepository().findById(
- credential.userId,
- );
- if (!userRecord) {
- return res.status(404).json({ error: "User not found" });
- }
-
- const deviceInfo = parseUserAgent(req);
- const authenticated = await authManager.authenticateWebAuthnUser(
- userRecord.id,
- deviceInfo.type,
- );
-
- if (!authenticated) {
- return res.status(401).json({
- error:
- "Passkey cannot unlock this account. Log in with password and register the passkey again.",
- });
- }
-
- await createCurrentWebauthnCredentialRepository().updateAuthState(
- credential.id,
- {
- counter: verification.authenticationInfo.newCounter,
- backedUp: verification.authenticationInfo.credentialBackedUp,
- deviceType: verification.authenticationInfo.credentialDeviceType,
- lastUsedAt: new Date().toISOString(),
- },
- );
-
- if (
- userRecord.totpEnabled &&
- verification.authenticationInfo.userVerified !== true
- ) {
- const deviceFingerprint = generateDeviceFingerprint(
- deviceInfo,
- getDeviceId(req),
- );
- const isTrusted = deviceFingerprint
- ? await authManager.isTrustedDevice(userRecord.id, deviceFingerprint)
- : false;
-
- if (!isTrusted) {
- const tempToken = await authManager.generateJWTToken(userRecord.id, {
- pendingTOTP: true,
- expiresIn: "10m",
- });
- return res.json({
- success: true,
- requires_totp: true,
- temp_token: tempToken,
- rememberMe: !!req.body?.rememberMe,
- });
- }
- }
-
- const token = await authManager.generateJWTToken(userRecord.id, {
+ const identity = await verifyPasskeyLogin(req);
+ await respondWithLogin(req, res, identity, {
+ methodId: "passkey",
rememberMe: !!req.body?.rememberMe,
- deviceType: deviceInfo.type,
- deviceInfo: deviceInfo.deviceInfo,
- });
-
- const timeoutSetting = getCurrentSettingValue("session_timeout_hours");
- const timeoutHours = timeoutSetting
- ? parseInt(timeoutSetting, 10) || 24
- : 24;
- const maxAge = req.body?.rememberMe
- ? 30 * 24 * 60 * 60 * 1000
- : timeoutHours * 60 * 60 * 1000;
-
- res.cookie("jwt", token, authManager.getSecureCookieOptions(req, maxAge));
- res.json({
- success: true,
- is_admin: !!userRecord.isAdmin,
- username: userRecord.username,
- userId: userRecord.id,
- is_oidc: !!userRecord.isOidc,
- totp_enabled: !!userRecord.totpEnabled,
- ...(isNativeAppRequest(req) ? { token } : {}),
});
} catch (error) {
- authLogger.warn("WebAuthn authentication failed", {
- operation: "webauthn_auth_verify",
- credentialId: credential.id,
- userId: credential.userId,
- error: getErrorMessage(error, "Unknown"),
- });
- res.status(401).json({ error: "Passkey authentication failed" });
+ sendLoginError(res, error);
}
});
diff --git a/src/backend/database/routes/users.ts b/src/backend/database/routes/users.ts
index 815f128d7..fb105da8f 100644
--- a/src/backend/database/routes/users.ts
+++ b/src/backend/database/routes/users.ts
@@ -1,23 +1,13 @@
import type { AuthenticatedRequest } from "../../../types/index.js";
import express, { type Request, type Response } from "express";
import bcrypt from "bcryptjs";
-import crypto from "crypto";
import { nanoid } from "nanoid";
import { authLogger } from "../../utils/logger.js";
import { AuthManager } from "../../utils/auth-manager.js";
import { DatabaseSaveTrigger } from "../../utils/database-save-trigger.js";
import { DataCrypto } from "../../utils/data-crypto.js";
-import {
- getDeviceId,
- parseUserAgent,
- generateDeviceFingerprint,
-} from "../../utils/user-agent-parser.js";
-import { loginRateLimiter } from "../../utils/login-rate-limiter.js";
-import { getRequestOriginWithForceHTTPS } from "../../utils/request-origin.js";
-import {
- getDesktopOidcCallbackUrl,
- isOidcTokenCallback,
-} from "../../utils/oidc-desktop-callback.js";
+import { parseUserAgent } from "../../utils/user-agent-parser.js";
+import { isOidcTokenCallback } from "../../utils/oidc-desktop-callback.js";
import { deleteUserAndRelatedData } from "./delete-user-data.js";
import {
isLoopbackRequest,
@@ -29,14 +19,7 @@ import { shouldShowDonationModal } from "./donation-modal-utils.js";
import { PermissionManager } from "../../utils/permission-manager.js";
import {
getOIDCConfigFromEnv,
- isOIDCUserAllowed,
- OIDCTokenFormatError,
- verifyOIDCToken,
- extractOidcGroupsFromSources,
- parseOidcRoleMap,
- resolveOidcMappedRoles,
loadProviderConfig,
- buildFetchOptions,
resolveProviderByIssuer,
validateLogoutToken,
} from "./user-oidc-utils.js";
@@ -55,8 +38,8 @@ import { registerUserAdminRoutes } from "./user-admin-routes.js";
import { registerUserDataAccessRoutes } from "./user-data-access-routes.js";
import { registerSSOProviderRoutes } from "./sso-provider-routes.js";
import { registerLDAPAuthRoutes } from "./ldap-auth-routes.js";
+import { registerAuthRoutes } from "./auth-routes.js";
import { logAudit, getRequestMeta } from "../../utils/audit-logger.js";
-import { notifyAutomationInternalEvent } from "../../hosts/automation-events.js";
import {
createCurrentSettingsRepository,
getCurrentSettingValue,
@@ -72,6 +55,25 @@ import {
resolveTrustedProxyRoles,
} from "../../utils/trusted-proxy-auth.js";
+import { getPasswordLoginStatus } from "../../auth/core-auth.js";
+import { verifyPasswordLogin } from "../../auth/builtin-login-methods.js";
+import {
+ redirectWithLoginError,
+ respondWithLogin,
+ respondWithRedirectLogin,
+ sendLoginError,
+} from "../../auth/login-pipeline.js";
+import {
+ handleOidcCallback,
+ RedirectLoginError,
+ startOidcLogin,
+} from "../../auth/legacy/oidc-login.js";
+import { LoginMethodError } from "../../auth/types.js";
+import {
+ isNativeAppRequest,
+ syncSharedCredentialsForUserRoles,
+} from "../../auth/session-issuer.js";
+
const authManager = AuthManager.getInstance();
const router = express.Router();
@@ -85,28 +87,6 @@ router.use((req, res, next) => {
next();
});
-async function syncSharedCredentialsForUserRoles(
- userId: string,
- operation: string,
-) {
- try {
- const { SharedHostSecretsManager } =
- await import("../../utils/shared-host-secrets-manager.js");
- await SharedHostSecretsManager.getInstance().snapshotForUserRoles(userId);
- const { SharedCredentialSecretsManager } =
- await import("../../utils/shared-credential-secrets-manager.js");
- await SharedCredentialSecretsManager.getInstance().snapshotForUserRoles(
- userId,
- );
- } catch (error) {
- authLogger.warn("Failed to sync role shared host secrets", {
- operation,
- userId,
- error,
- });
- }
-}
-
function isNonEmptyString(val: unknown): val is string {
return typeof val === "string" && val.trim().length > 0;
}
@@ -122,17 +102,6 @@ function isRegistrationAllowed(): boolean {
}
}
-function isPasswordLoginAllowed(): boolean {
- const envVal = process.env.ALLOW_PASSWORD_LOGIN;
- if (envVal !== undefined) return envVal.trim().toLowerCase() === "true";
- try {
- const value = getCurrentSettingValue("allow_password_login");
- return value ? value === "true" : true;
- } catch {
- return true;
- }
-}
-
function isPasswordResetAllowed(): boolean {
const envVal = process.env.ALLOW_PASSWORD_RESET;
if (envVal !== undefined) return envVal.trim().toLowerCase() === "true";
@@ -150,13 +119,6 @@ function getOidcSilentLoginDefaultFromEnv(): boolean | undefined {
return envVal.trim().toLowerCase() === "true";
}
-function isNativeAppRequest(req: Request): boolean {
- return (
- (req.get("User-Agent") || "").startsWith("Termix-Mobile/") ||
- req.get("X-Electron-App") === "true"
- );
-}
-
async function findCurrentUser(userId: string): Promise {
return createCurrentUserRepository().findById(userId);
}
@@ -166,25 +128,6 @@ async function requireCurrentAdmin(userId: string): Promise