feat: add auth extension points and one ssh connect pipeline

plugins/remote-desktop/src/backend/index.ts

@@ -1,4 +1,5 @@
 import type { PluginContext } from "@termix/plugin-sdk/backend";
+import { setPluginSsh } from "./ssh.js";
 import {
   getGuacSessionInfo,
   handleGuacamoleUpgrade,
@@ -10,6 +11,8 @@ import {
 import { startRemoteDesktopService } from "./routes.js";
 
 export async function activate(ctx: PluginContext) {
+  setPluginSsh(ctx.ssh);
+  ctx.disposables.add(() => setPluginSsh(null));
   await startGuacamoleService();
 
   startRemoteDesktopService(ctx.http.router());

plugins/remote-desktop/src/backend/routes.ts

@@ -19,7 +19,8 @@ import {
   createCurrentSettingsRepository,
 } from "../../../../src/backend/database/repositories/factory.js";
 import { resolveGuacdOptions } from "../../../../src/backend/utils/guacd-config.js";
-import { createJumpHostChain } from "../../../../src/backend/hosts/jump-host-chain.js";
+import type { Client } from "ssh2";
+import { pluginSsh } from "./ssh.js";
 import { getGuacSessionByConnectId } from "./guacamole-server.js";
 import {
   logAudit,
@@ -545,18 +546,9 @@ router.post(
         try {
           // The chain dials the first hop through that hop's own SOCKS5
           // settings; the target host's proxy config does not apply to it.
-          const jumpClient = await createJumpHostChain(jumpHosts, userId);
-
-          if (!jumpClient) {
-            guacLogger.error(
-              "Failed to establish jump host chain for guacamole",
-              undefined,
-              { operation: "guac_ssh_tunnel_error", hostId },
-            );
-            return res.status(500).json({
-              error: "Failed to establish SSH tunnel to remote host",
-            });
-          }
+          const { client: jumpClient } = await pluginSsh().jumpChain<Client>(
+            jumpHosts as Array<{ hostId: number }>,
+          );
 
           const targetHostname = hostname;
           const targetPort = port;

plugins/remote-desktop/src/backend/ssh.ts

@@ -0,0 +1,36 @@
+import type { Client } from "ssh2";
+import type {
+  PluginSsh,
+  PluginSshConnection,
+  PluginSshConnectOptions,
+  PluginSshHost,
+} from "@termix/plugin-sdk/backend";
+
+let current: PluginSsh | null = null;
+
+/** Set in activate, cleared on deactivate. */
+export function setPluginSsh(ssh: PluginSsh | null): void {
+  current = ssh;
+}
+
+export function pluginSsh(): PluginSsh {
+  if (!current) throw new Error("The plugin is not active");
+  return current;
+}
+
+/** withConnection with ssh2's Client type filled in. */
+export function withSshConnection<T>(
+  host: number | PluginSshHost,
+  options: PluginSshConnectOptions & { pool: string },
+  fn: (client: Client) => Promise<T>,
+): Promise<T> {
+  return pluginSsh().withConnection<T, Client>(host, options, fn);
+}
+
+/** connect with ssh2's Client type filled in. */
+export function connectSsh(
+  host: number | PluginSshHost,
+  options?: PluginSshConnectOptions,
+): Promise<PluginSshConnection<Client>> {
+  return pluginSsh().connect<Client>(host, options);
+}