preliminary ssh host structs, api, ui

backend/src/@types/fastify.d.ts

@@ -37,6 +37,7 @@ import { TSecretScanningServiceFactory } from "@app/ee/services/secret-scanning/
 import { TSecretSnapshotServiceFactory } from "@app/ee/services/secret-snapshot/secret-snapshot-service";
 import { TSshCertificateAuthorityServiceFactory } from "@app/ee/services/ssh/ssh-certificate-authority-service";
 import { TSshCertificateTemplateServiceFactory } from "@app/ee/services/ssh-certificate-template/ssh-certificate-template-service";
+import { TSshHostServiceFactory } from "@app/ee/services/ssh-host/ssh-host-service";
 import { TTrustedIpServiceFactory } from "@app/ee/services/trusted-ip/trusted-ip-service";
 import { TAuthMode } from "@app/server/plugins/auth/inject-identity";
 import { TApiKeyServiceFactory } from "@app/services/api-key/api-key-service";
@@ -205,6 +206,7 @@ declare module "fastify" {
       certificateTemplate: TCertificateTemplateServiceFactory;
       sshCertificateAuthority: TSshCertificateAuthorityServiceFactory;
       sshCertificateTemplate: TSshCertificateTemplateServiceFactory;
+      sshHost: TSshHostServiceFactory;
       certificateAuthority: TCertificateAuthorityServiceFactory;
       certificateAuthorityCrl: TCertificateAuthorityCrlServiceFactory;
       certificateEst: TCertificateEstServiceFactory;

backend/src/@types/knex.d.ts

@@ -356,6 +356,12 @@ import {
   TSshCertificateTemplates,
   TSshCertificateTemplatesInsert,
   TSshCertificateTemplatesUpdate,
+  TSshHosts,
+  TSshHostsInsert,
+  TSshHostsUpdate,
+  TSshHostLoginMappings,
+  TSshHostLoginMappingsInsert,
+  TSshHostLoginMappingsUpdate,
   TSuperAdmin,
   TSuperAdminInsert,
   TSuperAdminUpdate,
@@ -419,6 +425,7 @@ declare module "knex/types/tables" {
   interface Tables {
     [TableName.Users]: KnexOriginal.CompositeTableType<TUsers, TUsersInsert, TUsersUpdate>;
     [TableName.Groups]: KnexOriginal.CompositeTableType<TGroups, TGroupsInsert, TGroupsUpdate>;
+    [TableName.SshHost]: KnexOriginal.CompositeTableType<TSshHosts, TSshHostsInsert, TSshHostsUpdate>;
     [TableName.SshCertificateAuthority]: KnexOriginal.CompositeTableType<
       TSshCertificateAuthorities,
       TSshCertificateAuthoritiesInsert,
@@ -444,6 +451,11 @@ declare module "knex/types/tables" {
       TSshCertificateBodiesInsert,
       TSshCertificateBodiesUpdate
     >;
+    [TableName.SshHostLoginMapping]: KnexOriginal.CompositeTableType<
+      TSshHostLoginMappings,
+      TSshHostLoginMappingsInsert,
+      TSshHostLoginMappingsUpdate
+    >;
     [TableName.CertificateAuthority]: KnexOriginal.CompositeTableType<
       TCertificateAuthorities,
       TCertificateAuthoritiesInsert,

backend/src/db/migrations/20250405185753_ssh-mgmt-v2.ts

@@ -0,0 +1,39 @@
+import { Knex } from "knex";
+
+import { TableName } from "../schemas";
+import { createOnUpdateTrigger, dropOnUpdateTrigger } from "../utils";
+
+export async function up(knex: Knex): Promise<void> {
+  if (!(await knex.schema.hasTable(TableName.SshHost))) {
+    await knex.schema.createTable(TableName.SshHost, (t) => {
+      t.uuid("id", { primaryKey: true }).defaultTo(knex.fn.uuid());
+      t.timestamps(true, true, true);
+      t.string("projectId").notNullable();
+      t.foreign("projectId").references("id").inTable(TableName.Project).onDelete("CASCADE");
+      t.string("hostname").notNullable();
+      t.string("userCertTtl").notNullable();
+      t.string("hostCertTtl").notNullable();
+    });
+    await createOnUpdateTrigger(knex, TableName.SshHost);
+  }
+
+  if (!(await knex.schema.hasTable(TableName.SshHostLoginMapping))) {
+    await knex.schema.createTable(TableName.SshHostLoginMapping, (t) => {
+      t.uuid("id", { primaryKey: true }).defaultTo(knex.fn.uuid());
+      t.timestamps(true, true, true);
+      t.uuid("sshHostId").notNullable();
+      t.foreign("sshHostId").references("id").inTable(TableName.SshHost).onDelete("CASCADE");
+      t.string("loginUser").notNullable();
+      t.specificType("allowedPrincipals", "text[]").notNullable();
+    });
+    await createOnUpdateTrigger(knex, TableName.SshHostLoginMapping);
+  }
+}
+
+export async function down(knex: Knex): Promise<void> {
+  await knex.schema.dropTableIfExists(TableName.SshHostLoginMapping);
+  await dropOnUpdateTrigger(knex, TableName.SshHostLoginMapping);
+
+  await knex.schema.dropTableIfExists(TableName.SshHost);
+  await dropOnUpdateTrigger(knex, TableName.SshHost);
+}

backend/src/db/schemas/access-approval-policies-approvers.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const AccessApprovalPoliciesApproversSchema = z.object({
@@ -17,10 +19,5 @@ export const AccessApprovalPoliciesApproversSchema = z.object({
 });
 
 export type TAccessApprovalPoliciesApprovers = z.infer<typeof AccessApprovalPoliciesApproversSchema>;
-export type TAccessApprovalPoliciesApproversInsert = Omit<
+export type TAccessApprovalPoliciesApproversInsert = Omit<z.input<typeof AccessApprovalPoliciesApproversSchema>, TImmutableDBKeys>;
-  z.input<typeof AccessApprovalPoliciesApproversSchema>,
+export type TAccessApprovalPoliciesApproversUpdate = Partial<Omit<z.input<typeof AccessApprovalPoliciesApproversSchema>, TImmutableDBKeys>>;
-  TImmutableDBKeys
->;
-export type TAccessApprovalPoliciesApproversUpdate = Partial<
-  Omit<z.input<typeof AccessApprovalPoliciesApproversSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/access-approval-policies.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const AccessApprovalPoliciesSchema = z.object({
@@ -15,13 +17,11 @@ export const AccessApprovalPoliciesSchema = z.object({
   envId: z.string().uuid(),
   createdAt: z.date(),
   updatedAt: z.date(),
-  enforcementLevel: z.string().default("hard"),
+  enforcementLevel: z.string().default('hard'),
   deletedAt: z.date().nullable().optional(),
   allowedSelfApprovals: z.boolean().default(true)
 });
 
 export type TAccessApprovalPolicies = z.infer<typeof AccessApprovalPoliciesSchema>;
 export type TAccessApprovalPoliciesInsert = Omit<z.input<typeof AccessApprovalPoliciesSchema>, TImmutableDBKeys>;
-export type TAccessApprovalPoliciesUpdate = Partial<
+export type TAccessApprovalPoliciesUpdate = Partial<Omit<z.input<typeof AccessApprovalPoliciesSchema>, TImmutableDBKeys>>;
-  Omit<z.input<typeof AccessApprovalPoliciesSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/access-approval-requests-reviewers.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const AccessApprovalRequestsReviewersSchema = z.object({
@@ -18,10 +20,5 @@ export const AccessApprovalRequestsReviewersSchema = z.object({
 });
 
 export type TAccessApprovalRequestsReviewers = z.infer<typeof AccessApprovalRequestsReviewersSchema>;
-export type TAccessApprovalRequestsReviewersInsert = Omit<
+export type TAccessApprovalRequestsReviewersInsert = Omit<z.input<typeof AccessApprovalRequestsReviewersSchema>, TImmutableDBKeys>;
-  z.input<typeof AccessApprovalRequestsReviewersSchema>,
+export type TAccessApprovalRequestsReviewersUpdate = Partial<Omit<z.input<typeof AccessApprovalRequestsReviewersSchema>, TImmutableDBKeys>>;
-  TImmutableDBKeys
->;
-export type TAccessApprovalRequestsReviewersUpdate = Partial<
-  Omit<z.input<typeof AccessApprovalRequestsReviewersSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/access-approval-requests.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const AccessApprovalRequestsSchema = z.object({
@@ -22,6 +24,4 @@ export const AccessApprovalRequestsSchema = z.object({
 
 export type TAccessApprovalRequests = z.infer<typeof AccessApprovalRequestsSchema>;
 export type TAccessApprovalRequestsInsert = Omit<z.input<typeof AccessApprovalRequestsSchema>, TImmutableDBKeys>;
-export type TAccessApprovalRequestsUpdate = Partial<
+export type TAccessApprovalRequestsUpdate = Partial<Omit<z.input<typeof AccessApprovalRequestsSchema>, TImmutableDBKeys>>;
-  Omit<z.input<typeof AccessApprovalRequestsSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/api-keys.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const ApiKeysSchema = z.object({

backend/src/db/schemas/audit-log-streams.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const AuditLogStreamsSchema = z.object({

backend/src/db/schemas/audit-logs.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const AuditLogsSchema = z.object({

backend/src/db/schemas/auth-token-sessions.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const AuthTokenSessionsSchema = z.object({

backend/src/db/schemas/auth-tokens.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const AuthTokensSchema = z.object({

backend/src/db/schemas/backup-private-key.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const BackupPrivateKeySchema = z.object({

backend/src/db/schemas/certificate-authorities.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const CertificateAuthoritiesSchema = z.object({
@@ -34,6 +36,4 @@ export const CertificateAuthoritiesSchema = z.object({
 
 export type TCertificateAuthorities = z.infer<typeof CertificateAuthoritiesSchema>;
 export type TCertificateAuthoritiesInsert = Omit<z.input<typeof CertificateAuthoritiesSchema>, TImmutableDBKeys>;
-export type TCertificateAuthoritiesUpdate = Partial<
+export type TCertificateAuthoritiesUpdate = Partial<Omit<z.input<typeof CertificateAuthoritiesSchema>, TImmutableDBKeys>>;
-  Omit<z.input<typeof CertificateAuthoritiesSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/certificate-authority-certs.ts

@@ -22,6 +22,4 @@ export const CertificateAuthorityCertsSchema = z.object({
 
 export type TCertificateAuthorityCerts = z.infer<typeof CertificateAuthorityCertsSchema>;
 export type TCertificateAuthorityCertsInsert = Omit<z.input<typeof CertificateAuthorityCertsSchema>, TImmutableDBKeys>;
-export type TCertificateAuthorityCertsUpdate = Partial<
+export type TCertificateAuthorityCertsUpdate = Partial<Omit<z.input<typeof CertificateAuthorityCertsSchema>, TImmutableDBKeys>>;
-  Omit<z.input<typeof CertificateAuthorityCertsSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/certificate-authority-crl.ts

@@ -20,6 +20,4 @@ export const CertificateAuthorityCrlSchema = z.object({
 
 export type TCertificateAuthorityCrl = z.infer<typeof CertificateAuthorityCrlSchema>;
 export type TCertificateAuthorityCrlInsert = Omit<z.input<typeof CertificateAuthorityCrlSchema>, TImmutableDBKeys>;
-export type TCertificateAuthorityCrlUpdate = Partial<
+export type TCertificateAuthorityCrlUpdate = Partial<Omit<z.input<typeof CertificateAuthorityCrlSchema>, TImmutableDBKeys>>;
-  Omit<z.input<typeof CertificateAuthorityCrlSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/certificate-authority-secret.ts

@@ -18,10 +18,5 @@ export const CertificateAuthoritySecretSchema = z.object({
 });
 
 export type TCertificateAuthoritySecret = z.infer<typeof CertificateAuthoritySecretSchema>;
-export type TCertificateAuthoritySecretInsert = Omit<
+export type TCertificateAuthoritySecretInsert = Omit<z.input<typeof CertificateAuthoritySecretSchema>, TImmutableDBKeys>;
-  z.input<typeof CertificateAuthoritySecretSchema>,
+export type TCertificateAuthoritySecretUpdate = Partial<Omit<z.input<typeof CertificateAuthoritySecretSchema>, TImmutableDBKeys>>;
-  TImmutableDBKeys
->;
-export type TCertificateAuthoritySecretUpdate = Partial<
-  Omit<z.input<typeof CertificateAuthoritySecretSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/certificate-template-est-configs.ts

@@ -21,10 +21,5 @@ export const CertificateTemplateEstConfigsSchema = z.object({
 });
 
 export type TCertificateTemplateEstConfigs = z.infer<typeof CertificateTemplateEstConfigsSchema>;
-export type TCertificateTemplateEstConfigsInsert = Omit<
+export type TCertificateTemplateEstConfigsInsert = Omit<z.input<typeof CertificateTemplateEstConfigsSchema>, TImmutableDBKeys>;
-  z.input<typeof CertificateTemplateEstConfigsSchema>,
+export type TCertificateTemplateEstConfigsUpdate = Partial<Omit<z.input<typeof CertificateTemplateEstConfigsSchema>, TImmutableDBKeys>>;
-  TImmutableDBKeys
->;
-export type TCertificateTemplateEstConfigsUpdate = Partial<
-  Omit<z.input<typeof CertificateTemplateEstConfigsSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/certificate-templates.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const CertificateTemplatesSchema = z.object({

backend/src/db/schemas/certificates.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const CertificatesSchema = z.object({
@@ -20,7 +22,7 @@ export const CertificatesSchema = z.object({
   notAfter: z.date(),
   revokedAt: z.date().nullable().optional(),
   revocationReason: z.number().nullable().optional(),
-  altNames: z.string().default("").nullable().optional(),
+  altNames: z.string().default('').nullable().optional(),
   caCertId: z.string().uuid(),
   certificateTemplateId: z.string().uuid().nullable().optional(),
   keyUsages: z.string().array().nullable().optional(),

backend/src/db/schemas/dynamic-secret-leases.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const DynamicSecretLeasesSchema = z.object({

backend/src/db/schemas/dynamic-secrets.ts

@@ -19,8 +19,8 @@ export const DynamicSecretsSchema = z.object({
   inputIV: z.string().nullable().optional(),
   inputCiphertext: z.string().nullable().optional(),
   inputTag: z.string().nullable().optional(),
-  algorithm: z.string().default("aes-256-gcm"),
+  algorithm: z.string().default('aes-256-gcm'),
-  keyEncoding: z.string().default("utf8"),
+  keyEncoding: z.string().default('utf8'),
   folderId: z.string().uuid(),
   status: z.string().nullable().optional(),
   statusDetails: z.string().nullable().optional(),

backend/src/db/schemas/external-group-org-role-mappings.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const ExternalGroupOrgRoleMappingsSchema = z.object({
@@ -18,10 +20,5 @@ export const ExternalGroupOrgRoleMappingsSchema = z.object({
 });
 
 export type TExternalGroupOrgRoleMappings = z.infer<typeof ExternalGroupOrgRoleMappingsSchema>;
-export type TExternalGroupOrgRoleMappingsInsert = Omit<
+export type TExternalGroupOrgRoleMappingsInsert = Omit<z.input<typeof ExternalGroupOrgRoleMappingsSchema>, TImmutableDBKeys>;
-  z.input<typeof ExternalGroupOrgRoleMappingsSchema>,
+export type TExternalGroupOrgRoleMappingsUpdate = Partial<Omit<z.input<typeof ExternalGroupOrgRoleMappingsSchema>, TImmutableDBKeys>>;
-  TImmutableDBKeys
->;
-export type TExternalGroupOrgRoleMappingsUpdate = Partial<
-  Omit<z.input<typeof ExternalGroupOrgRoleMappingsSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/git-app-install-sessions.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const GitAppInstallSessionsSchema = z.object({

backend/src/db/schemas/git-app-org.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const GitAppOrgSchema = z.object({

backend/src/db/schemas/group-project-membership-roles.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const GroupProjectMembershipRolesSchema = z.object({
@@ -22,10 +24,5 @@ export const GroupProjectMembershipRolesSchema = z.object({
 });
 
 export type TGroupProjectMembershipRoles = z.infer<typeof GroupProjectMembershipRolesSchema>;
-export type TGroupProjectMembershipRolesInsert = Omit<
+export type TGroupProjectMembershipRolesInsert = Omit<z.input<typeof GroupProjectMembershipRolesSchema>, TImmutableDBKeys>;
-  z.input<typeof GroupProjectMembershipRolesSchema>,
+export type TGroupProjectMembershipRolesUpdate = Partial<Omit<z.input<typeof GroupProjectMembershipRolesSchema>, TImmutableDBKeys>>;
-  TImmutableDBKeys
->;
-export type TGroupProjectMembershipRolesUpdate = Partial<
-  Omit<z.input<typeof GroupProjectMembershipRolesSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/group-project-memberships.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const GroupProjectMembershipsSchema = z.object({
@@ -17,6 +19,4 @@ export const GroupProjectMembershipsSchema = z.object({
 
 export type TGroupProjectMemberships = z.infer<typeof GroupProjectMembershipsSchema>;
 export type TGroupProjectMembershipsInsert = Omit<z.input<typeof GroupProjectMembershipsSchema>, TImmutableDBKeys>;
-export type TGroupProjectMembershipsUpdate = Partial<
+export type TGroupProjectMembershipsUpdate = Partial<Omit<z.input<typeof GroupProjectMembershipsSchema>, TImmutableDBKeys>>;
-  Omit<z.input<typeof GroupProjectMembershipsSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/groups.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const GroupsSchema = z.object({

backend/src/db/schemas/identities.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const IdentitiesSchema = z.object({

backend/src/db/schemas/identity-access-tokens.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const IdentityAccessTokensSchema = z.object({

backend/src/db/schemas/identity-aws-auths.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const IdentityAwsAuthsSchema = z.object({

backend/src/db/schemas/identity-azure-auths.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const IdentityAzureAuthsSchema = z.object({

backend/src/db/schemas/identity-gcp-auths.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const IdentityGcpAuthsSchema = z.object({

backend/src/db/schemas/identity-kubernetes-auths.ts

@@ -34,6 +34,4 @@ export const IdentityKubernetesAuthsSchema = z.object({
 
 export type TIdentityKubernetesAuths = z.infer<typeof IdentityKubernetesAuthsSchema>;
 export type TIdentityKubernetesAuthsInsert = Omit<z.input<typeof IdentityKubernetesAuthsSchema>, TImmutableDBKeys>;
-export type TIdentityKubernetesAuthsUpdate = Partial<
+export type TIdentityKubernetesAuthsUpdate = Partial<Omit<z.input<typeof IdentityKubernetesAuthsSchema>, TImmutableDBKeys>>;
-  Omit<z.input<typeof IdentityKubernetesAuthsSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/identity-metadata.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const IdentityMetadataSchema = z.object({

backend/src/db/schemas/identity-org-memberships.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const IdentityOrgMembershipsSchema = z.object({
@@ -19,6 +21,4 @@ export const IdentityOrgMembershipsSchema = z.object({
 
 export type TIdentityOrgMemberships = z.infer<typeof IdentityOrgMembershipsSchema>;
 export type TIdentityOrgMembershipsInsert = Omit<z.input<typeof IdentityOrgMembershipsSchema>, TImmutableDBKeys>;
-export type TIdentityOrgMembershipsUpdate = Partial<
+export type TIdentityOrgMembershipsUpdate = Partial<Omit<z.input<typeof IdentityOrgMembershipsSchema>, TImmutableDBKeys>>;
-  Omit<z.input<typeof IdentityOrgMembershipsSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/identity-project-additional-privilege.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const IdentityProjectAdditionalPrivilegeSchema = z.object({
@@ -22,10 +24,5 @@ export const IdentityProjectAdditionalPrivilegeSchema = z.object({
 });
 
 export type TIdentityProjectAdditionalPrivilege = z.infer<typeof IdentityProjectAdditionalPrivilegeSchema>;
-export type TIdentityProjectAdditionalPrivilegeInsert = Omit<
+export type TIdentityProjectAdditionalPrivilegeInsert = Omit<z.input<typeof IdentityProjectAdditionalPrivilegeSchema>, TImmutableDBKeys>;
-  z.input<typeof IdentityProjectAdditionalPrivilegeSchema>,
+export type TIdentityProjectAdditionalPrivilegeUpdate = Partial<Omit<z.input<typeof IdentityProjectAdditionalPrivilegeSchema>, TImmutableDBKeys>>;
-  TImmutableDBKeys
->;
-export type TIdentityProjectAdditionalPrivilegeUpdate = Partial<
-  Omit<z.input<typeof IdentityProjectAdditionalPrivilegeSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/identity-project-membership-role.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const IdentityProjectMembershipRoleSchema = z.object({
@@ -22,10 +24,5 @@ export const IdentityProjectMembershipRoleSchema = z.object({
 });
 
 export type TIdentityProjectMembershipRole = z.infer<typeof IdentityProjectMembershipRoleSchema>;
-export type TIdentityProjectMembershipRoleInsert = Omit<
+export type TIdentityProjectMembershipRoleInsert = Omit<z.input<typeof IdentityProjectMembershipRoleSchema>, TImmutableDBKeys>;
-  z.input<typeof IdentityProjectMembershipRoleSchema>,
+export type TIdentityProjectMembershipRoleUpdate = Partial<Omit<z.input<typeof IdentityProjectMembershipRoleSchema>, TImmutableDBKeys>>;
-  TImmutableDBKeys
->;
-export type TIdentityProjectMembershipRoleUpdate = Partial<
-  Omit<z.input<typeof IdentityProjectMembershipRoleSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/identity-project-memberships.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const IdentityProjectMembershipsSchema = z.object({
@@ -16,10 +18,5 @@ export const IdentityProjectMembershipsSchema = z.object({
 });
 
 export type TIdentityProjectMemberships = z.infer<typeof IdentityProjectMembershipsSchema>;
-export type TIdentityProjectMembershipsInsert = Omit<
+export type TIdentityProjectMembershipsInsert = Omit<z.input<typeof IdentityProjectMembershipsSchema>, TImmutableDBKeys>;
-  z.input<typeof IdentityProjectMembershipsSchema>,
+export type TIdentityProjectMembershipsUpdate = Partial<Omit<z.input<typeof IdentityProjectMembershipsSchema>, TImmutableDBKeys>>;
-  TImmutableDBKeys
->;
-export type TIdentityProjectMembershipsUpdate = Partial<
-  Omit<z.input<typeof IdentityProjectMembershipsSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/identity-token-auths.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const IdentityTokenAuthsSchema = z.object({

backend/src/db/schemas/identity-ua-client-secrets.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const IdentityUaClientSecretsSchema = z.object({
@@ -24,6 +26,4 @@ export const IdentityUaClientSecretsSchema = z.object({
 
 export type TIdentityUaClientSecrets = z.infer<typeof IdentityUaClientSecretsSchema>;
 export type TIdentityUaClientSecretsInsert = Omit<z.input<typeof IdentityUaClientSecretsSchema>, TImmutableDBKeys>;
-export type TIdentityUaClientSecretsUpdate = Partial<
+export type TIdentityUaClientSecretsUpdate = Partial<Omit<z.input<typeof IdentityUaClientSecretsSchema>, TImmutableDBKeys>>;
-  Omit<z.input<typeof IdentityUaClientSecretsSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/identity-universal-auths.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const IdentityUniversalAuthsSchema = z.object({
@@ -22,6 +24,4 @@ export const IdentityUniversalAuthsSchema = z.object({
 
 export type TIdentityUniversalAuths = z.infer<typeof IdentityUniversalAuthsSchema>;
 export type TIdentityUniversalAuthsInsert = Omit<z.input<typeof IdentityUniversalAuthsSchema>, TImmutableDBKeys>;
-export type TIdentityUniversalAuthsUpdate = Partial<
+export type TIdentityUniversalAuthsUpdate = Partial<Omit<z.input<typeof IdentityUniversalAuthsSchema>, TImmutableDBKeys>>;
-  Omit<z.input<typeof IdentityUniversalAuthsSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/incident-contacts.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const IncidentContactsSchema = z.object({

backend/src/db/schemas/index.ts

@@ -120,6 +120,8 @@ export * from "./ssh-certificate-authority-secrets";
 export * from "./ssh-certificate-bodies";
 export * from "./ssh-certificate-templates";
 export * from "./ssh-certificates";
+export * from "./ssh-host-login-mappings";
+export * from "./ssh-hosts";
 export * from "./super-admin";
 export * from "./totp-configs";
 export * from "./trusted-ips";

backend/src/db/schemas/integrations.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const IntegrationsSchema = z.object({
@@ -25,7 +27,7 @@ export const IntegrationsSchema = z.object({
   metadata: z.unknown().nullable().optional(),
   integrationAuthId: z.string().uuid(),
   envId: z.string().uuid(),
-  secretPath: z.string().default("/"),
+  secretPath: z.string().default('/'),
   createdAt: z.date(),
   updatedAt: z.date(),
   lastUsed: z.date().nullable().optional(),

backend/src/db/schemas/kmip-client-certificates.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const KmipClientCertificatesSchema = z.object({
@@ -18,6 +20,4 @@ export const KmipClientCertificatesSchema = z.object({
 
 export type TKmipClientCertificates = z.infer<typeof KmipClientCertificatesSchema>;
 export type TKmipClientCertificatesInsert = Omit<z.input<typeof KmipClientCertificatesSchema>, TImmutableDBKeys>;
-export type TKmipClientCertificatesUpdate = Partial<
+export type TKmipClientCertificatesUpdate = Partial<Omit<z.input<typeof KmipClientCertificatesSchema>, TImmutableDBKeys>>;
-  Omit<z.input<typeof KmipClientCertificatesSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/kmip-clients.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const KmipClientsSchema = z.object({

backend/src/db/schemas/kmip-org-server-certificates.ts

@@ -24,6 +24,4 @@ export const KmipOrgServerCertificatesSchema = z.object({
 
 export type TKmipOrgServerCertificates = z.infer<typeof KmipOrgServerCertificatesSchema>;
 export type TKmipOrgServerCertificatesInsert = Omit<z.input<typeof KmipOrgServerCertificatesSchema>, TImmutableDBKeys>;
-export type TKmipOrgServerCertificatesUpdate = Partial<
+export type TKmipOrgServerCertificatesUpdate = Partial<Omit<z.input<typeof KmipOrgServerCertificatesSchema>, TImmutableDBKeys>>;
-  Omit<z.input<typeof KmipOrgServerCertificatesSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/kms-keys.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const KmsKeysSchema = z.object({

backend/src/db/schemas/kms-root-config.ts

@@ -12,7 +12,7 @@ import { TImmutableDBKeys } from "./models";
 export const KmsRootConfigSchema = z.object({
   id: z.string().uuid(),
   encryptedRootKey: zodBuffer,
-  encryptionStrategy: z.string().default("SOFTWARE").nullable().optional(),
+  encryptionStrategy: z.string().default('SOFTWARE').nullable().optional(),
   createdAt: z.date(),
   updatedAt: z.date()
 });

backend/src/db/schemas/ldap-configs.ts

@@ -26,10 +26,10 @@ export const LdapConfigsSchema = z.object({
   caCertTag: z.string().nullable().optional(),
   createdAt: z.date(),
   updatedAt: z.date(),
-  groupSearchBase: z.string().default(""),
+  groupSearchBase: z.string().default(''),
-  groupSearchFilter: z.string().default(""),
+  groupSearchFilter: z.string().default(''),
-  searchFilter: z.string().default(""),
+  searchFilter: z.string().default(''),
-  uniqueUserAttribute: z.string().default(""),
+  uniqueUserAttribute: z.string().default(''),
   encryptedLdapBindDN: zodBuffer,
   encryptedLdapBindPass: zodBuffer,
   encryptedLdapCaCertificate: zodBuffer.nullable().optional()

backend/src/db/schemas/ldap-group-maps.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const LdapGroupMapsSchema = z.object({

backend/src/db/schemas/models.ts

@@ -2,6 +2,8 @@ import { z } from "zod";
 
 export enum TableName {
   Users = "users",
+  SshHost = "ssh_hosts",
+  SshHostLoginMapping = "ssh_host_login_mappings",
   SshCertificateAuthority = "ssh_certificate_authorities",
   SshCertificateAuthoritySecret = "ssh_certificate_authority_secrets",
   SshCertificateTemplate = "ssh_certificate_templates",

backend/src/db/schemas/org-bots.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const OrgBotsSchema = z.object({

backend/src/db/schemas/org-memberships.ts

@@ -5,12 +5,14 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const OrgMembershipsSchema = z.object({
   id: z.string().uuid(),
   role: z.string(),
-  status: z.string().default("invited"),
+  status: z.string().default('invited'),
   inviteEmail: z.string().nullable().optional(),
   createdAt: z.date(),
   updatedAt: z.date(),

backend/src/db/schemas/org-roles.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const OrgRolesSchema = z.object({

backend/src/db/schemas/organizations.ts

@@ -20,7 +20,7 @@ export const OrganizationsSchema = z.object({
   scimEnabled: z.boolean().default(false).nullable().optional(),
   kmsDefaultKeyId: z.string().uuid().nullable().optional(),
   kmsEncryptedDataKey: zodBuffer.nullable().optional(),
-  defaultMembershipRole: z.string().default("member"),
+  defaultMembershipRole: z.string().default('member'),
   enforceMfa: z.boolean().default(false),
   selectedMfaMethod: z.string().nullable().optional(),
   allowSecretSharingOutsideOrganization: z.boolean().default(true).nullable().optional(),

backend/src/db/schemas/pki-alerts.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const PkiAlertsSchema = z.object({

backend/src/db/schemas/pki-collection-items.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const PkiCollectionItemsSchema = z.object({

backend/src/db/schemas/pki-collections.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const PkiCollectionsSchema = z.object({

backend/src/db/schemas/project-bots.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const ProjectBotsSchema = z.object({

backend/src/db/schemas/project-environments.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const ProjectEnvironmentsSchema = z.object({

backend/src/db/schemas/project-gateways.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const ProjectGatewaysSchema = z.object({

backend/src/db/schemas/project-keys.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const ProjectKeysSchema = z.object({

backend/src/db/schemas/project-memberships.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const ProjectMembershipsSchema = z.object({

backend/src/db/schemas/project-roles.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const ProjectRolesSchema = z.object({

backend/src/db/schemas/project-slack-configs.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const ProjectSlackConfigsSchema = z.object({
@@ -12,9 +14,9 @@ export const ProjectSlackConfigsSchema = z.object({
   projectId: z.string(),
   slackIntegrationId: z.string().uuid(),
   isAccessRequestNotificationEnabled: z.boolean().default(false),
-  accessRequestChannels: z.string().default(""),
+  accessRequestChannels: z.string().default(''),
   isSecretRequestNotificationEnabled: z.boolean().default(false),
-  secretRequestChannels: z.string().default(""),
+  secretRequestChannels: z.string().default(''),
   createdAt: z.date(),
   updatedAt: z.date()
 });

backend/src/db/schemas/project-split-backfill-ids.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const ProjectSplitBackfillIdsSchema = z.object({
@@ -16,6 +18,4 @@ export const ProjectSplitBackfillIdsSchema = z.object({
 
 export type TProjectSplitBackfillIds = z.infer<typeof ProjectSplitBackfillIdsSchema>;
 export type TProjectSplitBackfillIdsInsert = Omit<z.input<typeof ProjectSplitBackfillIdsSchema>, TImmutableDBKeys>;
-export type TProjectSplitBackfillIdsUpdate = Partial<
+export type TProjectSplitBackfillIdsUpdate = Partial<Omit<z.input<typeof ProjectSplitBackfillIdsSchema>, TImmutableDBKeys>>;
-  Omit<z.input<typeof ProjectSplitBackfillIdsSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/project-templates.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const ProjectTemplatesSchema = z.object({

backend/src/db/schemas/project-user-additional-privilege.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const ProjectUserAdditionalPrivilegeSchema = z.object({
@@ -24,10 +26,5 @@ export const ProjectUserAdditionalPrivilegeSchema = z.object({
 });
 
 export type TProjectUserAdditionalPrivilege = z.infer<typeof ProjectUserAdditionalPrivilegeSchema>;
-export type TProjectUserAdditionalPrivilegeInsert = Omit<
+export type TProjectUserAdditionalPrivilegeInsert = Omit<z.input<typeof ProjectUserAdditionalPrivilegeSchema>, TImmutableDBKeys>;
-  z.input<typeof ProjectUserAdditionalPrivilegeSchema>,
+export type TProjectUserAdditionalPrivilegeUpdate = Partial<Omit<z.input<typeof ProjectUserAdditionalPrivilegeSchema>, TImmutableDBKeys>>;
-  TImmutableDBKeys
->;
-export type TProjectUserAdditionalPrivilegeUpdate = Partial<
-  Omit<z.input<typeof ProjectUserAdditionalPrivilegeSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/project-user-membership-roles.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const ProjectUserMembershipRolesSchema = z.object({
@@ -22,10 +24,5 @@ export const ProjectUserMembershipRolesSchema = z.object({
 });
 
 export type TProjectUserMembershipRoles = z.infer<typeof ProjectUserMembershipRolesSchema>;
-export type TProjectUserMembershipRolesInsert = Omit<
+export type TProjectUserMembershipRolesInsert = Omit<z.input<typeof ProjectUserMembershipRolesSchema>, TImmutableDBKeys>;
-  z.input<typeof ProjectUserMembershipRolesSchema>,
+export type TProjectUserMembershipRolesUpdate = Partial<Omit<z.input<typeof ProjectUserMembershipRolesSchema>, TImmutableDBKeys>>;
-  TImmutableDBKeys
->;
-export type TProjectUserMembershipRolesUpdate = Partial<
-  Omit<z.input<typeof ProjectUserMembershipRolesSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/rate-limit.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const RateLimitSchema = z.object({

backend/src/db/schemas/resource-metadata.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const ResourceMetadataSchema = z.object({

backend/src/db/schemas/scim-tokens.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const ScimTokensSchema = z.object({

backend/src/db/schemas/secret-approval-policies-approvers.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretApprovalPoliciesApproversSchema = z.object({
@@ -17,10 +19,5 @@ export const SecretApprovalPoliciesApproversSchema = z.object({
 });
 
 export type TSecretApprovalPoliciesApprovers = z.infer<typeof SecretApprovalPoliciesApproversSchema>;
-export type TSecretApprovalPoliciesApproversInsert = Omit<
+export type TSecretApprovalPoliciesApproversInsert = Omit<z.input<typeof SecretApprovalPoliciesApproversSchema>, TImmutableDBKeys>;
-  z.input<typeof SecretApprovalPoliciesApproversSchema>,
+export type TSecretApprovalPoliciesApproversUpdate = Partial<Omit<z.input<typeof SecretApprovalPoliciesApproversSchema>, TImmutableDBKeys>>;
-  TImmutableDBKeys
->;
-export type TSecretApprovalPoliciesApproversUpdate = Partial<
-  Omit<z.input<typeof SecretApprovalPoliciesApproversSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/secret-approval-policies.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretApprovalPoliciesSchema = z.object({
@@ -15,13 +17,11 @@ export const SecretApprovalPoliciesSchema = z.object({
   envId: z.string().uuid(),
   createdAt: z.date(),
   updatedAt: z.date(),
-  enforcementLevel: z.string().default("hard"),
+  enforcementLevel: z.string().default('hard'),
   deletedAt: z.date().nullable().optional(),
   allowedSelfApprovals: z.boolean().default(true)
 });
 
 export type TSecretApprovalPolicies = z.infer<typeof SecretApprovalPoliciesSchema>;
 export type TSecretApprovalPoliciesInsert = Omit<z.input<typeof SecretApprovalPoliciesSchema>, TImmutableDBKeys>;
-export type TSecretApprovalPoliciesUpdate = Partial<
+export type TSecretApprovalPoliciesUpdate = Partial<Omit<z.input<typeof SecretApprovalPoliciesSchema>, TImmutableDBKeys>>;
-  Omit<z.input<typeof SecretApprovalPoliciesSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/secret-approval-request-secret-tags-v2.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretApprovalRequestSecretTagsV2Schema = z.object({
@@ -16,10 +18,5 @@ export const SecretApprovalRequestSecretTagsV2Schema = z.object({
 });
 
 export type TSecretApprovalRequestSecretTagsV2 = z.infer<typeof SecretApprovalRequestSecretTagsV2Schema>;
-export type TSecretApprovalRequestSecretTagsV2Insert = Omit<
+export type TSecretApprovalRequestSecretTagsV2Insert = Omit<z.input<typeof SecretApprovalRequestSecretTagsV2Schema>, TImmutableDBKeys>;
-  z.input<typeof SecretApprovalRequestSecretTagsV2Schema>,
+export type TSecretApprovalRequestSecretTagsV2Update = Partial<Omit<z.input<typeof SecretApprovalRequestSecretTagsV2Schema>, TImmutableDBKeys>>;
-  TImmutableDBKeys
->;
-export type TSecretApprovalRequestSecretTagsV2Update = Partial<
-  Omit<z.input<typeof SecretApprovalRequestSecretTagsV2Schema>, TImmutableDBKeys>
->;

backend/src/db/schemas/secret-approval-request-secret-tags.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretApprovalRequestSecretTagsSchema = z.object({
@@ -16,10 +18,5 @@ export const SecretApprovalRequestSecretTagsSchema = z.object({
 });
 
 export type TSecretApprovalRequestSecretTags = z.infer<typeof SecretApprovalRequestSecretTagsSchema>;
-export type TSecretApprovalRequestSecretTagsInsert = Omit<
+export type TSecretApprovalRequestSecretTagsInsert = Omit<z.input<typeof SecretApprovalRequestSecretTagsSchema>, TImmutableDBKeys>;
-  z.input<typeof SecretApprovalRequestSecretTagsSchema>,
+export type TSecretApprovalRequestSecretTagsUpdate = Partial<Omit<z.input<typeof SecretApprovalRequestSecretTagsSchema>, TImmutableDBKeys>>;
-  TImmutableDBKeys
->;
-export type TSecretApprovalRequestSecretTagsUpdate = Partial<
-  Omit<z.input<typeof SecretApprovalRequestSecretTagsSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/secret-approval-requests-reviewers.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretApprovalRequestsReviewersSchema = z.object({
@@ -18,10 +20,5 @@ export const SecretApprovalRequestsReviewersSchema = z.object({
 });
 
 export type TSecretApprovalRequestsReviewers = z.infer<typeof SecretApprovalRequestsReviewersSchema>;
-export type TSecretApprovalRequestsReviewersInsert = Omit<
+export type TSecretApprovalRequestsReviewersInsert = Omit<z.input<typeof SecretApprovalRequestsReviewersSchema>, TImmutableDBKeys>;
-  z.input<typeof SecretApprovalRequestsReviewersSchema>,
+export type TSecretApprovalRequestsReviewersUpdate = Partial<Omit<z.input<typeof SecretApprovalRequestsReviewersSchema>, TImmutableDBKeys>>;
-  TImmutableDBKeys
->;
-export type TSecretApprovalRequestsReviewersUpdate = Partial<
-  Omit<z.input<typeof SecretApprovalRequestsReviewersSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/secret-approval-requests-secrets-v2.ts

@@ -29,10 +29,5 @@ export const SecretApprovalRequestsSecretsV2Schema = z.object({
 });
 
 export type TSecretApprovalRequestsSecretsV2 = z.infer<typeof SecretApprovalRequestsSecretsV2Schema>;
-export type TSecretApprovalRequestsSecretsV2Insert = Omit<
+export type TSecretApprovalRequestsSecretsV2Insert = Omit<z.input<typeof SecretApprovalRequestsSecretsV2Schema>, TImmutableDBKeys>;
-  z.input<typeof SecretApprovalRequestsSecretsV2Schema>,
+export type TSecretApprovalRequestsSecretsV2Update = Partial<Omit<z.input<typeof SecretApprovalRequestsSecretsV2Schema>, TImmutableDBKeys>>;
-  TImmutableDBKeys
->;
-export type TSecretApprovalRequestsSecretsV2Update = Partial<
-  Omit<z.input<typeof SecretApprovalRequestsSecretsV2Schema>, TImmutableDBKeys>
->;

backend/src/db/schemas/secret-approval-requests-secrets.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretApprovalRequestsSecretsSchema = z.object({
@@ -23,8 +25,8 @@ export const SecretApprovalRequestsSecretsSchema = z.object({
   secretReminderNote: z.string().nullable().optional(),
   secretReminderRepeatDays: z.number().nullable().optional(),
   skipMultilineEncoding: z.boolean().default(false).nullable().optional(),
-  algorithm: z.string().default("aes-256-gcm"),
+  algorithm: z.string().default('aes-256-gcm'),
-  keyEncoding: z.string().default("utf8"),
+  keyEncoding: z.string().default('utf8'),
   metadata: z.unknown().nullable().optional(),
   createdAt: z.date(),
   updatedAt: z.date(),
@@ -35,10 +37,5 @@ export const SecretApprovalRequestsSecretsSchema = z.object({
 });
 
 export type TSecretApprovalRequestsSecrets = z.infer<typeof SecretApprovalRequestsSecretsSchema>;
-export type TSecretApprovalRequestsSecretsInsert = Omit<
+export type TSecretApprovalRequestsSecretsInsert = Omit<z.input<typeof SecretApprovalRequestsSecretsSchema>, TImmutableDBKeys>;
-  z.input<typeof SecretApprovalRequestsSecretsSchema>,
+export type TSecretApprovalRequestsSecretsUpdate = Partial<Omit<z.input<typeof SecretApprovalRequestsSecretsSchema>, TImmutableDBKeys>>;
-  TImmutableDBKeys
->;
-export type TSecretApprovalRequestsSecretsUpdate = Partial<
-  Omit<z.input<typeof SecretApprovalRequestsSecretsSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/secret-approval-requests.ts

@@ -5,13 +5,15 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretApprovalRequestsSchema = z.object({
   id: z.string().uuid(),
   policyId: z.string().uuid(),
   hasMerged: z.boolean().default(false),
-  status: z.string().default("open"),
+  status: z.string().default('open'),
   conflicts: z.unknown().nullable().optional(),
   slug: z.string(),
   folderId: z.string().uuid(),
@@ -25,6 +27,4 @@ export const SecretApprovalRequestsSchema = z.object({
 
 export type TSecretApprovalRequests = z.infer<typeof SecretApprovalRequestsSchema>;
 export type TSecretApprovalRequestsInsert = Omit<z.input<typeof SecretApprovalRequestsSchema>, TImmutableDBKeys>;
-export type TSecretApprovalRequestsUpdate = Partial<
+export type TSecretApprovalRequestsUpdate = Partial<Omit<z.input<typeof SecretApprovalRequestsSchema>, TImmutableDBKeys>>;
-  Omit<z.input<typeof SecretApprovalRequestsSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/secret-blind-indexes.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretBlindIndexesSchema = z.object({
@@ -12,8 +14,8 @@ export const SecretBlindIndexesSchema = z.object({
   encryptedSaltCipherText: z.string(),
   saltIV: z.string(),
   saltTag: z.string(),
-  algorithm: z.string().default("aes-256-gcm"),
+  algorithm: z.string().default('aes-256-gcm'),
-  keyEncoding: z.string().default("utf8"),
+  keyEncoding: z.string().default('utf8'),
   projectId: z.string(),
   createdAt: z.date(),
   updatedAt: z.date()

backend/src/db/schemas/secret-folder-versions.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretFolderVersionsSchema = z.object({

backend/src/db/schemas/secret-folders.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretFoldersSchema = z.object({

backend/src/db/schemas/secret-imports.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretImportsSchema = z.object({

backend/src/db/schemas/secret-references-v2.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretReferencesV2Schema = z.object({

backend/src/db/schemas/secret-references.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretReferencesSchema = z.object({

backend/src/db/schemas/secret-rotation-output-v2.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretRotationOutputV2Schema = z.object({
@@ -16,6 +18,4 @@ export const SecretRotationOutputV2Schema = z.object({
 
 export type TSecretRotationOutputV2 = z.infer<typeof SecretRotationOutputV2Schema>;
 export type TSecretRotationOutputV2Insert = Omit<z.input<typeof SecretRotationOutputV2Schema>, TImmutableDBKeys>;
-export type TSecretRotationOutputV2Update = Partial<
+export type TSecretRotationOutputV2Update = Partial<Omit<z.input<typeof SecretRotationOutputV2Schema>, TImmutableDBKeys>>;
-  Omit<z.input<typeof SecretRotationOutputV2Schema>, TImmutableDBKeys>
->;

backend/src/db/schemas/secret-rotation-outputs.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretRotationOutputsSchema = z.object({

backend/src/db/schemas/secret-scanning-git-risks.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretScanningGitRisksSchema = z.object({
@@ -43,6 +45,4 @@ export const SecretScanningGitRisksSchema = z.object({
 
 export type TSecretScanningGitRisks = z.infer<typeof SecretScanningGitRisksSchema>;
 export type TSecretScanningGitRisksInsert = Omit<z.input<typeof SecretScanningGitRisksSchema>, TImmutableDBKeys>;
-export type TSecretScanningGitRisksUpdate = Partial<
+export type TSecretScanningGitRisksUpdate = Partial<Omit<z.input<typeof SecretScanningGitRisksSchema>, TImmutableDBKeys>>;
-  Omit<z.input<typeof SecretScanningGitRisksSchema>, TImmutableDBKeys>
->;

backend/src/db/schemas/secret-sharing.ts

@@ -21,13 +21,13 @@ export const SecretSharingSchema = z.object({
   createdAt: z.date(),
   updatedAt: z.date(),
   expiresAfterViews: z.number().nullable().optional(),
-  accessType: z.string().default("anyone"),
+  accessType: z.string().default('anyone'),
   name: z.string().nullable().optional(),
   lastViewedAt: z.date().nullable().optional(),
   password: z.string().nullable().optional(),
   encryptedSecret: zodBuffer.nullable().optional(),
   identifier: z.string().nullable().optional(),
-  type: z.string().default("share")
+  type: z.string().default('share')
 });
 
 export type TSecretSharing = z.infer<typeof SecretSharingSchema>;

backend/src/db/schemas/secret-snapshot-folders.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretSnapshotFoldersSchema = z.object({

backend/src/db/schemas/secret-snapshot-secrets-v2.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretSnapshotSecretsV2Schema = z.object({
@@ -18,6 +20,4 @@ export const SecretSnapshotSecretsV2Schema = z.object({
 
 export type TSecretSnapshotSecretsV2 = z.infer<typeof SecretSnapshotSecretsV2Schema>;
 export type TSecretSnapshotSecretsV2Insert = Omit<z.input<typeof SecretSnapshotSecretsV2Schema>, TImmutableDBKeys>;
-export type TSecretSnapshotSecretsV2Update = Partial<
+export type TSecretSnapshotSecretsV2Update = Partial<Omit<z.input<typeof SecretSnapshotSecretsV2Schema>, TImmutableDBKeys>>;
-  Omit<z.input<typeof SecretSnapshotSecretsV2Schema>, TImmutableDBKeys>
->;

backend/src/db/schemas/secret-snapshot-secrets.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretSnapshotSecretsSchema = z.object({

backend/src/db/schemas/secret-snapshots.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretSnapshotsSchema = z.object({

backend/src/db/schemas/secret-syncs.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretSyncsSchema = z.object({

backend/src/db/schemas/secret-tag-junction.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretTagJunctionSchema = z.object({

backend/src/db/schemas/secret-tags.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretTagsSchema = z.object({
@@ -15,7 +17,7 @@ export const SecretTagsSchema = z.object({
   updatedAt: z.date(),
   createdBy: z.string().uuid().nullable().optional(),
   projectId: z.string(),
-  createdByActorType: z.string().default("user")
+  createdByActorType: z.string().default('user')
 });
 
 export type TSecretTags = z.infer<typeof SecretTagsSchema>;

backend/src/db/schemas/secret-v2-tag-junction.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+
+
 import { TImmutableDBKeys } from "./models";
 
 export const SecretV2TagJunctionSchema = z.object({