add admin stuff

app/models/schemas.py

@@ -93,6 +93,32 @@ class RoleGrantRequest(BaseModel):
     expires_at: str | None = None
 
 
+class UserGroupCreateRequest(BaseModel):
+    name: str = Field(min_length=1, max_length=128)
+    description: str | None = Field(default=None, max_length=1024)
+
+
+class GroupMemberRequest(BaseModel):
+    user_id: int
+
+
+class GroupRoleGrantRequest(BaseModel):
+    user_group_id: int
+    host_group_id: int
+    role_name: Literal[
+        "ssh_connect", "rdp_connect", "file_transfer", "clipboard",
+        "session_recording_view", "admin_hostgroup",
+    ]
+    expires_at: str | None = None
+
+
+class ApiTokenCreateRequest(BaseModel):
+    label: str = Field(min_length=1, max_length=128)
+    user_id: int
+    scopes: list[str] = Field(min_length=1, max_length=32)
+    expires_at: str | None = None
+
+
 class SshKeyCreateRequest(BaseModel):
     label: str = Field(min_length=1, max_length=128)
     owner_user_id: int | None = None