feat: add auth extension points and one ssh connect pipeline

plugins/automations/src/backend/actions/index.ts

@@ -7,11 +7,7 @@ import {
   execElevated,
   shellSingleQuote,
 } from "../../../../../src/backend/hosts/metrics-shared/exec-elevated.js";
-import {
-  createFleetSshFactory,
-  getFleetPoolKey,
-} from "../../../../../src/backend/hosts/ssh-client-factory.js";
-import { withConnection } from "../../../../../src/backend/hosts/ssh-connection-pool.js";
+import { withSshConnection } from "../ssh.js";
 import { resolveSnippetCommand } from "../../../../../src/backend/database/routes/snippets-execution.js";
 import {
   createCurrentNotificationChannelRepository,
@@ -383,9 +379,9 @@ async function execOnHost(
   if (timeout <= 0) return { error: "Run deadline exceeded" };
 
   try {
-    const result = await withConnection(
-      getFleetPoolKey(sshHost),
-      createFleetSshFactory(sshHost),
+    const result = await withSshConnection(
+      sshHost as never,
+      { pool: "fleet", purpose: "fleet" },
       async (client) => {
         if (elevated) {
           return execElevated(client, command, sshHost.sudoPassword, {

plugins/automations/src/backend/docker-watcher.ts

@@ -3,11 +3,7 @@ import { createCurrentAutomationRepository } from "../../../../src/backend/datab
 import { resolveHostById } from "../../../../src/backend/hosts/host-resolver.js";
 import { DataCrypto } from "../../../../src/backend/utils/data-crypto.js";
 import { execCommand } from "../../../../src/backend/hosts/metrics-shared/common-utils.js";
-import {
-  createFleetSshFactory,
-  getFleetPoolKey,
-} from "../../../../src/backend/hosts/ssh-client-factory.js";
-import { withConnection } from "../../../../src/backend/hosts/ssh-connection-pool.js";
+import { withSshConnection } from "./ssh.js";
 import { statsLogger } from "../../../../src/backend/utils/logger.js";
 import { onDockerEvent } from "./triggers.js";
 
@@ -154,9 +150,9 @@ async function pollHost(hostId: number, userId: string): Promise<void> {
     return;
   }
 
-  const result = await withConnection(
-    getFleetPoolKey(host as never),
-    createFleetSshFactory(host as never),
+  const result = await withSshConnection(
+    host as never as never,
+    { pool: "fleet", purpose: "fleet" },
     (client) =>
       execCommand(
         client,

plugins/automations/src/backend/index.ts

@@ -1,4 +1,5 @@
 import type { PluginContext } from "@termix/plugin-sdk/backend";
+import { setPluginSsh } from "./ssh.js";
 import { startAutomationsService, stopAutomationsService } from "./routes.js";
 import {
   startAutomationScheduler,
@@ -6,6 +7,8 @@ import {
 } from "./scheduler.js";
 
 export async function activate(ctx: PluginContext) {
+  setPluginSsh(ctx.ssh);
+  ctx.disposables.add(() => setPluginSsh(null));
   startAutomationsService(
     // The webhook route authenticates on its own per-automation token rather
     // than a session, which is the point of an inbound webhook.

plugins/automations/src/backend/ssh.ts

@@ -0,0 +1,36 @@
+import type { Client } from "ssh2";
+import type {
+  PluginSsh,
+  PluginSshConnection,
+  PluginSshConnectOptions,
+  PluginSshHost,
+} from "@termix/plugin-sdk/backend";
+
+let current: PluginSsh | null = null;
+
+/** Set in activate, cleared on deactivate. */
+export function setPluginSsh(ssh: PluginSsh | null): void {
+  current = ssh;
+}
+
+export function pluginSsh(): PluginSsh {
+  if (!current) throw new Error("The plugin is not active");
+  return current;
+}
+
+/** withConnection with ssh2's Client type filled in. */
+export function withSshConnection<T>(
+  host: number | PluginSshHost,
+  options: PluginSshConnectOptions & { pool: string },
+  fn: (client: Client) => Promise<T>,
+): Promise<T> {
+  return pluginSsh().withConnection<T, Client>(host, options, fn);
+}
+
+/** connect with ssh2's Client type filled in. */
+export function connectSsh(
+  host: number | PluginSshHost,
+  options?: PluginSshConnectOptions,
+): Promise<PluginSshConnection<Client>> {
+  return pluginSsh().connect<Client>(host, options);
+}