feat: add auth extension points and one ssh connect pipeline

plugins/ai/src/backend/index.ts

@@ -1,8 +1,11 @@
 import type { PluginContext } from "@termix/plugin-sdk/backend";
+import { setPluginSsh } from "./ssh.js";
 import { startAiService, stopAiService } from "./routes.js";
 import { createCurrentAiRepository } from "../../../../src/backend/database/repositories/factory.js";
 
 export async function activate(ctx: PluginContext) {
+  setPluginSsh(ctx.ssh);
+  ctx.disposables.add(() => setPluginSsh(null));
   startAiService(ctx.http.router());
 
   // Offered by reference, not copied: this hands over a resolver, so the key

plugins/ai/src/backend/ssh.ts

@@ -0,0 +1,36 @@
+import type { Client } from "ssh2";
+import type {
+  PluginSsh,
+  PluginSshConnection,
+  PluginSshConnectOptions,
+  PluginSshHost,
+} from "@termix/plugin-sdk/backend";
+
+let current: PluginSsh | null = null;
+
+/** Set in activate, cleared on deactivate. */
+export function setPluginSsh(ssh: PluginSsh | null): void {
+  current = ssh;
+}
+
+export function pluginSsh(): PluginSsh {
+  if (!current) throw new Error("The plugin is not active");
+  return current;
+}
+
+/** withConnection with ssh2's Client type filled in. */
+export function withSshConnection<T>(
+  host: number | PluginSshHost,
+  options: PluginSshConnectOptions & { pool: string },
+  fn: (client: Client) => Promise<T>,
+): Promise<T> {
+  return pluginSsh().withConnection<T, Client>(host, options, fn);
+}
+
+/** connect with ssh2's Client type filled in. */
+export function connectSsh(
+  host: number | PluginSshHost,
+  options?: PluginSshConnectOptions,
+): Promise<PluginSshConnection<Client>> {
+  return pluginSsh().connect<Client>(host, options);
+}

plugins/ai/src/backend/tools/executor.ts

@@ -7,11 +7,7 @@ import {
 import { validateDefinition } from "../../../../automations/src/backend/routes.js";
 import { resolveHostById } from "../../../../../src/backend/hosts/host-resolver.js";
 import { execCommand } from "../../../../../src/backend/hosts/metrics-shared/common-utils.js";
-import {
-  createFleetSshFactory,
-  getFleetPoolKey,
-} from "../../../../../src/backend/hosts/ssh-client-factory.js";
-import { withConnection } from "../../../../../src/backend/hosts/ssh-connection-pool.js";
+import { withSshConnection } from "../ssh.js";
 import { getTool } from "./catalog.js";
 
 /** Approved commands get a bounded window rather than hanging the request. */
@@ -277,9 +273,9 @@ async function runCommandOnHost(
   command: string,
 ): Promise<{ output?: string; error?: string }> {
   try {
-    const result = await withConnection(
-      getFleetPoolKey(host as any),
-      createFleetSshFactory(host as any),
+    const result = await withSshConnection(
+      host as any as never,
+      { pool: "fleet", purpose: "fleet" },
       async (client) => execCommand(client, command, COMMAND_TIMEOUT_MS),
     );
 

plugins/ai/tests/backend/tools/proposal-executor.test.ts

@@ -34,14 +34,10 @@ vi.mock(
     execCommand: (...args: unknown[]) => execCommand(...args),
   }),
 );
-vi.mock("../../../../../src/backend/hosts/ssh-client-factory.js", () => ({
-  createFleetSshFactory: () => () => ({}),
-  getFleetPoolKey: () => "pool",
-}));
-vi.mock("../../../../../src/backend/hosts/ssh-connection-pool.js", () => ({
-  withConnection: async (
-    _key: string,
-    _factory: unknown,
+vi.mock("../../../src/backend/ssh.js", () => ({
+  withSshConnection: async (
+    _host: unknown,
+    _options: unknown,
     run: (client: unknown) => Promise<unknown>,
   ) => run({}),
 }));