feat: add sudo password and add diagonal bg's

src/backend/database/db/index.ts

@@ -701,6 +701,23 @@ const migrateSchema = () => {
     }
   }
 
+  // Migration: Add sudo_password column to ssh_data table
+  try {
+    sqlite.prepare("SELECT sudo_password FROM ssh_data LIMIT 1").get();
+  } catch {
+    try {
+      sqlite.exec("ALTER TABLE ssh_data ADD COLUMN sudo_password TEXT");
+      databaseLogger.info("Added sudo_password column to ssh_data table", {
+        operation: "schema_migration",
+      });
+    } catch (alterError) {
+      databaseLogger.warn("Failed to add sudo_password column", {
+        operation: "schema_migration",
+        error: alterError,
+      });
+    }
+  }
+
   // RBAC Phase 2: Roles tables
   try {
     sqlite.prepare("SELECT id FROM roles LIMIT 1").get();

src/backend/database/db/schema.ts

@@ -66,6 +66,7 @@ export const sshData = sqliteTable("ssh_data", {
   key: text("key", { length: 8192 }),
   key_password: text("key_password"),
   keyType: text("key_type"),
+  sudoPassword: text("sudo_password"),
 
   autostartPassword: text("autostart_password"),
   autostartKey: text("autostart_key", { length: 8192 }),

src/backend/database/routes/ssh.ts

@@ -243,6 +243,7 @@ router.post(
       key,
       keyPassword,
       keyType,
+      sudoPassword,
       pin,
       enableTerminal,
       enableTunnel,
@@ -315,6 +316,7 @@ router.post(
       terminalConfig: terminalConfig ? JSON.stringify(terminalConfig) : null,
       forceKeyboardInteractive: forceKeyboardInteractive ? "true" : "false",
       notes: notes || null,
+      sudoPassword: sudoPassword || null,
       useSocks5: useSocks5 ? 1 : 0,
       socks5Host: socks5Host || null,
       socks5Port: socks5Port || null,
@@ -493,6 +495,7 @@ router.put(
       key,
       keyPassword,
       keyType,
+      sudoPassword,
       pin,
       enableTerminal,
       enableTunnel,
@@ -560,6 +563,7 @@ router.put(
       terminalConfig: terminalConfig ? JSON.stringify(terminalConfig) : null,
       forceKeyboardInteractive: forceKeyboardInteractive ? "true" : "false",
       notes: notes || null,
+      sudoPassword: sudoPassword || null,
       useSocks5: useSocks5 ? 1 : 0,
       socks5Host: socks5Host || null,
       socks5Port: socks5Port || null,