@dbx-tools/appkit-lakebox 0.0.0-stage → 0.9.132

package/lib/src/plugin.js

@@ -0,0 +1,329 @@
+import { createWorkspaceClient, lakebase, toPlugin, } from "@databricks/appkit";
+import { executeFromRegistry, } from "@databricks/appkit/beta";
+import { USER_EMAIL_HEADER, USER_ID_HEADER, appkit, lakebaseResolver, pluginRegistry, toolkitEntries, toolOperations, ToolRegistryPlugin, } from "@dbx-tools/appkit";
+import { createLakeboxServiceOperationSchema, executeLakeboxCommandOperationSchema, getLakeboxOperationSchema, getLakeboxServiceLogsOperationSchema, LAKEBOX_PLUGIN_NAME, LAKEBOX_ROUTES, lakeboxCommandRequestSchema, lakeboxServiceActionSchema, lakeboxServiceLogsRequestSchema, listLakeboxServicesOperationSchema, removeLakeboxServiceOperationSchema, startLakeboxServiceOperationSchema, stopLakeboxServiceOperationSchema, } from "@dbx-tools/shared-lakebox";
+import { z } from "zod";
+import { LakeboxResourceRegistry } from "./_resource-registry.js";
+import { LakeboxServiceSnapshots } from "./_service-snapshots.js";
+import { LakeboxPluginConfigSchema, resolveLakeboxPluginConfig, } from "./config.js";
+import { LakeboxRuntime } from "./runtime.js";
+import { withServiceOrigin } from "./services.js";
+const CONFIG_SCHEMA = z.toJSONSchema(LakeboxPluginConfigSchema);
+/**
+ * AppKit plugin for the single app Lakebox.
+ *
+ * Registers user-scoped REST routes, agent tools, the deterministic service
+ * proxy, and WebSocket upgrade handling. Every Lakebox lifecycle call uses the
+ * app service principal; the authenticated request identity only selects the
+ * user's Lakebox account and authorizes that user's routes.
+ */
+export class AppKitLakeboxPlugin extends ToolRegistryPlugin {
+    static manifest = {
+        name: LAKEBOX_PLUGIN_NAME,
+        displayName: "Lakebox",
+        description: "Runs per-user services, terminals, desktops, and commands in one lazily created Databricks Lakebox.",
+        stability: "beta",
+        resources: { required: [], optional: [] },
+        config: { schema: CONFIG_SCHEMA },
+    };
+    runtime;
+    mounted = false;
+    httpServer;
+    upgradeAttachTimer;
+    upgradeIdentityGate;
+    upgradeHandler = (request, socket, head) => {
+        void this.handleUpgrade(request, socket, head);
+    };
+    /** Creates a plugin with a supplied shared runtime or one from resolved config. */
+    constructor(config = {}) {
+        super(config);
+        this.runtime = config.runtime ?? new LakeboxRuntime(resolveLakeboxPluginConfig(config));
+    }
+    get toolRegistry() {
+        return this.createToolRegistry();
+    }
+    async setup() {
+        this.context?.onLifecycle("setup:complete", async () => {
+            const pool = lakebaseResolver.captureServicePrincipalPool(pluginRegistry.require(this.context, lakebase, "appkit-lakebox").exports().pool);
+            this.runtime.initialize(createWorkspaceClient().config, (headers) => this.requestIdentity(headers), new LakeboxServiceSnapshots(), new LakeboxResourceRegistry(this.runtime.config.application, pool));
+            void this.runtime.cleanupLegacy(pool);
+            const server = this.context?.getPlugins().get("server");
+            if (!server || this.mounted)
+                return;
+            this.upgradeIdentityGate = resolveUpgradeIdentityGate(this.context?.getPlugins().get("authGate"));
+            server.addExtension((application) => application.use(this.runtime.routes.middleware()));
+            this.mounted = true;
+            this.attachUpgradeHandler(server);
+        });
+    }
+    injectRoutes(router) {
+        const json = (name, method, path, handler) => this.route(router, {
+            name,
+            method,
+            path,
+            handler: async (req, res) => {
+                res.json(await handler(this.resolveUserId(req), req));
+            },
+        });
+        json("status", "get", LAKEBOX_ROUTES.status, (identity) => this.runtime.summary(identity));
+        json("start", "post", LAKEBOX_ROUTES.start, async (identity) => {
+            await this.runtime.start();
+            return this.runtime.summary(identity);
+        });
+        json("stop", "post", LAKEBOX_ROUTES.stop, async (identity) => {
+            await this.runtime.stop();
+            return this.runtime.summary(identity);
+        });
+        json("executeCommand", "post", LAKEBOX_ROUTES.commands, (identity, req) => this.runtime.execute(identity, lakeboxCommandRequestSchema.parse(req.body ?? {})).result);
+        json("services", "get", LAKEBOX_ROUTES.services, async (identity) => ({
+            services: await this.runtime.listServices(identity),
+        }));
+        json("createService", "post", LAKEBOX_ROUTES.services, async (identity, req) => ({
+            service: await this.runtime.createService(identity, req.body ?? {}),
+        }));
+        json("startService", "post", LAKEBOX_ROUTES.serviceStart, async (identity, req) => ({
+            service: await this.runtime.startService(identity, serviceName(req)),
+        }));
+        json("stopService", "post", LAKEBOX_ROUTES.serviceStop, async (identity, req) => ({
+            service: await this.runtime.stopService(identity, serviceName(req)),
+        }));
+        json("removeService", "delete", LAKEBOX_ROUTES.service, async (identity, req) => ({
+            removed: await this.runtime.removeService(identity, serviceName(req)),
+        }));
+        json("serviceLogs", "get", LAKEBOX_ROUTES.serviceLogs, (identity, req) => this.runtime.serviceLogs(identity, lakeboxServiceLogsRequestSchema.parse({
+            name: req.params.name,
+            maxLines: req.query.maxLines,
+            maxChars: req.query.maxChars,
+        })));
+        json("metrics", "get", LAKEBOX_ROUTES.metrics, () => this.runtime.metricsResponse());
+        this.route(router, {
+            name: "metricsStream",
+            method: "get",
+            path: LAKEBOX_ROUTES.metricsStream,
+            handler: async (req, res) => this.streamMetrics(req, res),
+        });
+    }
+    /** Returns browser-safe route defaults published through AppKit client config. */
+    clientConfig() {
+        return { routePrefix: this.runtime.config.routePrefix };
+    }
+    /** Returns selected AppKit toolkit entries backed by this plugin's agent tools. */
+    toolkit(options) {
+        return toolkitEntries.entries(LAKEBOX_PLUGIN_NAME, this.getAgentTools(), {
+            ...options,
+            prefix: options?.prefix ?? "",
+        });
+    }
+    /** Executes one registered agent tool for the current execution identity. */
+    executeAgentTool(name, args, signal, context) {
+        return executeFromRegistry(this.createToolRegistry(context?.resourceId, context?.origin), name, args, signal);
+    }
+    /** Returns the typed sibling-plugin API. */
+    exports() {
+        return {
+            summary: (identity) => this.runtime.summary(identity),
+            start: () => this.runtime.start(),
+            stop: () => this.runtime.stop(),
+            delete: () => this.runtime.delete(),
+            executeCommand: (identity, input) => this.runtime.execute(identity, input).result,
+            listServices: (identity) => this.runtime.listServices(identity),
+            createService: (identity, input) => this.runtime.createService(identity, input),
+            startService: (identity, name) => this.runtime.startService(identity, name),
+            stopService: (identity, name) => this.runtime.stopService(identity, name),
+            removeService: (identity, name) => this.runtime.removeService(identity, name),
+            serviceLogs: (identity, input) => this.runtime.serviceLogs(identity, input),
+            operations: (identity) => this.operations(identity),
+            toolkit: (options) => this.toolkit(options),
+        };
+    }
+    /** Cancels in-flight work before shutdown tears down resources. */
+    abortActiveOperations() {
+        this.runtime.abortActiveOperations();
+    }
+    /** Detaches WebSocket handling and closes the shared runtime. */
+    async shutdown() {
+        if (this.upgradeAttachTimer)
+            clearTimeout(this.upgradeAttachTimer);
+        this.upgradeAttachTimer = undefined;
+        this.httpServer?.off("upgrade", this.upgradeHandler);
+        this.httpServer = undefined;
+        await this.runtime.close();
+    }
+    /** Returns the Zod-owned operation contracts used by agent tools. */
+    operations(identity, origin) {
+        const user = () => identity ?? this.executionIdentity();
+        const presentService = (value) => omitLog(withServiceOrigin(value, origin));
+        return toolOperations.defineOperations({
+            get_lakebox: {
+                schema: getLakeboxOperationSchema,
+                execute: async (_input, signal) => {
+                    const summary = await this.runtime.summary(user(), signal);
+                    return { ...summary, services: summary.services.map(presentService) };
+                },
+            },
+            execute_lakebox_command: {
+                schema: executeLakeboxCommandOperationSchema,
+                execute: (input, signal) => this.runtime.execute(user(), input, signal).result,
+            },
+            list_lakebox_services: {
+                schema: listLakeboxServicesOperationSchema,
+                execute: async (_input, signal) => ({
+                    services: (await this.runtime.listServices(user(), signal)).map(presentService),
+                }),
+            },
+            create_lakebox_service: {
+                schema: createLakeboxServiceOperationSchema,
+                execute: async (input, signal) => ({
+                    service: presentService(await this.runtime.createService(user(), input, signal)),
+                }),
+            },
+            start_lakebox_service: {
+                schema: startLakeboxServiceOperationSchema,
+                execute: async (input, signal) => ({
+                    service: presentService(await this.runtime.startService(user(), input.name, signal)),
+                }),
+            },
+            stop_lakebox_service: {
+                schema: stopLakeboxServiceOperationSchema,
+                execute: async (input, signal) => ({
+                    service: presentService(await this.runtime.stopService(user(), input.name, signal)),
+                }),
+            },
+            remove_lakebox_service: {
+                schema: removeLakeboxServiceOperationSchema,
+                execute: async (input, signal) => ({
+                    removed: await this.runtime.removeService(user(), input.name, signal),
+                }),
+            },
+            get_lakebox_service_logs: {
+                schema: getLakeboxServiceLogsOperationSchema,
+                execute: (input, signal) => this.runtime.serviceLogs(user(), input, signal),
+            },
+        });
+    }
+    createToolRegistry(identity, origin) {
+        return toolOperations.toolRegistryFromOperations(this.operations(identity, origin));
+    }
+    executionIdentity() {
+        const context = appkit.tryGetExecutionContext();
+        if (!context)
+            throw new Error("Lakebox tools require an AppKit execution context");
+        return "userId" in context ? context.userId : context.serviceUserId;
+    }
+    /**
+     * Resolves route identity with the same rules as REST: the forwarded user,
+     * or AppKit's development user for direct loopback navigation outside
+     * production. Everything else is anonymous and fails closed.
+     */
+    requestIdentity(headers) {
+        const forwarded = headerValue(headers[USER_ID_HEADER])?.trim();
+        if (forwarded)
+            return forwarded;
+        if (process.env.NODE_ENV !== "development" || !isLoopbackHost(headerValue(headers.host))) {
+            return undefined;
+        }
+        try {
+            return this.resolveUserId({
+                header: (name) => headerValue(headers[name.toLowerCase()]),
+            });
+        }
+        catch {
+            return undefined;
+        }
+    }
+    async streamMetrics(req, res) {
+        const initial = await this.runtime.metricsResponse();
+        res.statusCode = 200;
+        res.setHeader("content-type", "text/event-stream; charset=utf-8");
+        res.setHeader("cache-control", "no-cache, no-transform");
+        res.setHeader("connection", "keep-alive");
+        res.setHeader("x-accel-buffering", "no");
+        res.flushHeaders?.();
+        res.write(`data: ${JSON.stringify(initial)}\n\n`);
+        const unsubscribe = this.runtime.subscribeMetrics((snapshot) => {
+            res.write(`data: ${JSON.stringify({ status: "running", series: [snapshot] })}\n\n`);
+        });
+        req.once("close", unsubscribe);
+    }
+    attachUpgradeHandler(server) {
+        if (this.httpServer || this.upgradeAttachTimer)
+            return;
+        try {
+            this.httpServer = server.getServer();
+            this.httpServer.on("upgrade", this.upgradeHandler);
+        }
+        catch {
+            this.upgradeAttachTimer = setTimeout(() => {
+                this.upgradeAttachTimer = undefined;
+                this.attachUpgradeHandler(server);
+            }, 10);
+            this.upgradeAttachTimer.unref?.();
+        }
+    }
+    async handleUpgrade(request, socket, head) {
+        const path = new URL(request.url ?? "/", "http://localhost").pathname;
+        if (!this.runtime.routes.canHandleUpgrade(path))
+            return;
+        const gate = this.upgradeIdentityGate;
+        if (gate) {
+            const headers = requestHeaders(request);
+            if (gate.isProtectedHost(headers)) {
+                delete request.headers[USER_ID_HEADER];
+                delete request.headers[USER_EMAIL_HEADER];
+                const userId = await gate.session(headers);
+                if (!userId) {
+                    socket.destroy();
+                    return;
+                }
+                request.headers[USER_ID_HEADER] = userId;
+                request.headers[USER_EMAIL_HEADER] = userId;
+            }
+        }
+        if (!(await this.runtime.routes.handleUpgrade(request, socket, head)))
+            socket.destroy();
+    }
+}
+function serviceName(req) {
+    return lakeboxServiceActionSchema.parse({ name: req.params.name }).name;
+}
+function omitLog({ log: _log, ...value }) {
+    return value;
+}
+function headerValue(value) {
+    return Array.isArray(value) ? value[0] : value;
+}
+function isLoopbackHost(host) {
+    if (!host)
+        return false;
+    try {
+        const hostname = new URL(`http://${host}`).hostname.toLowerCase();
+        return hostname === "localhost" || hostname === "127.0.0.1" || hostname === "[::1]";
+    }
+    catch {
+        return false;
+    }
+}
+function resolveUpgradeIdentityGate(plugin) {
+    const exports = plugin?.exports?.();
+    if (typeof exports?.isProtectedHost !== "function" ||
+        typeof exports?.session !== "function") {
+        return undefined;
+    }
+    return exports;
+}
+function requestHeaders(request) {
+    const headers = new Headers();
+    for (const [name, value] of Object.entries(request.headers)) {
+        if (Array.isArray(value)) {
+            for (const item of value)
+                headers.append(name, item);
+        }
+        else if (value !== undefined) {
+            headers.set(name, value);
+        }
+    }
+    return headers;
+}
+/** AppKit plugin factory for {@link AppKitLakeboxPlugin}. */
+export const lakebox = toPlugin(AppKitLakeboxPlugin);
+//# sourceMappingURL=data:application/json;base64,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

package/lib/src/routes.d.ts

@@ -0,0 +1,75 @@
+import type { IncomingHttpHeaders, IncomingMessage } from "node:http";
+import { type Socket } from "node:net";
+import type { SshSession } from "@dbx-tools/lakebox/session";
+import type { LakeboxUser } from "@dbx-tools/shared-lakebox";
+import type { NextFunction, Request, Response } from "express";
+import type { LakeboxServiceRoute } from "./services.ts";
+/** Result of resolving one user's service for a routed request. */
+export type LakeboxRouteResolution = {
+    kind: "ready";
+    session: SshSession;
+    route: LakeboxServiceRoute;
+} | {
+    kind: "loading";
+} | {
+    kind: "failed";
+    message: string;
+} | {
+    kind: "missing";
+};
+/** Runtime callbacks that authorize and resolve deterministic routes. */
+export interface LakeboxRouteResolver {
+    /** Returns the authenticated Lakebox user for request headers, or `undefined`. */
+    user(headers: IncomingHttpHeaders): LakeboxUser | undefined;
+    /**
+     * Resolves a running service. Returns `loading` after starting the Lakebox
+     * or service in the background, and `missing` for an unknown service.
+     */
+    resolve(user: LakeboxUser, service: string): Promise<LakeboxRouteResolution>;
+    /** Reports that a ready service refused a forwarded connection. */
+    unavailable(user: LakeboxUser, service: string): void;
+}
+interface RouteMatch {
+    userHash: string;
+    service: string;
+    mount: string;
+}
+/**
+ * Proxies `<prefix>/<user-hash>/<service>` to that user's service port.
+ *
+ * The user hash is the only routing key. A request is forwarded only when its
+ * authenticated identity hashes to the same value, and the port is derived from
+ * the hash and service name, so there is no stored route table. Requests
+ * without an identity are rejected with 404, including WebSocket upgrades.
+ */
+export declare class LakeboxRouteRegistry {
+    private readonly prefix;
+    private readonly resolver;
+    private readonly forwardingReadyTimeoutMs;
+    private readonly bridges;
+    private readonly upgrades;
+    private readonly pending;
+    private readonly proxy;
+    private shuttingDown;
+    /** Creates a registry beneath one AppKit route prefix. */
+    constructor(prefix: string, resolver: LakeboxRouteResolver, forwardingReadyTimeoutMs?: number);
+    /** Returns the route path segment match for a request path. */
+    match(path: string): RouteMatch | undefined;
+    /** Express middleware that authorizes, rewrites, and proxies matching requests. */
+    middleware(): (request: Request, response: Response, next: NextFunction) => Promise<void>;
+    /** Number of open forwarded HTTP and WebSocket connections. */
+    activeConnections(): number;
+    /** Returns whether an upgrade path belongs to the Lakebox route prefix. */
+    canHandleUpgrade(path: string): boolean;
+    /** Proxies an authorized WebSocket upgrade. Returns false when it was not handled. */
+    handleUpgrade(request: IncomingMessage, socket: Socket, head: Buffer): Promise<boolean>;
+    /** Closes every forwarding bridge, for example after the Lakebox stops. */
+    closeBridges(): Promise<void>;
+    /** Suppresses expected proxy errors once shutdown begins. */
+    beginShutdown(): void;
+    /** Closes bridges and the shared proxy. */
+    close(): Promise<void>;
+    private authorize;
+    private bridge;
+}
+export {};