@dbx-tools/lakebox 0.0.0-stage → 0.9.132

package/lib/src/session.js

@@ -0,0 +1,309 @@
+import { createHash } from "node:crypto";
+import { isIP } from "node:net";
+import { errorUtils, log } from "@dbx-tools/shared-core";
+import ssh2 from "ssh2";
+import { z } from "zod";
+import { createSshTransport, SshCommand, sshCommandScript, } from "./_ssh.js";
+export { SshCommand, sshCommandScript } from "./_ssh.js";
+const { Client } = ssh2;
+const logger = log.logger("lakebox:ssh");
+const SERVICE_DIRECT_SUFFIX = ".service-direct.cloud.databricks.com";
+const DnsAnswerSchema = z
+    .object({
+    type: z.number().int().describe("DNS record type number."),
+    data: z.string().describe("DNS record value."),
+})
+    .passthrough()
+    .describe("One DNS-over-HTTPS answer record.");
+const DnsResponseSchema = z
+    .object({
+    Answer: z.array(DnsAnswerSchema).optional().describe("Resolved DNS answer records."),
+})
+    .passthrough()
+    .describe("Google DNS-over-HTTPS JSON response.");
+/**
+ * Verified SSH session that delegates commands and remote TCP connections to
+ * the transport selected by `src/_ssh.ts`.
+ *
+ * The initial ssh2 handshake verifies and persists the Databricks gateway host
+ * key. The selected transport then starts its pooled command and forwarding
+ * resources. Resolved transport and patch policy determine whether the verified
+ * client seeds the ssh2 pool or is replaced by native OpenSSH ControlMasters.
+ */
+export class SshSession {
+    options;
+    activeCommands = new Set();
+    pendingClients = new Set();
+    transport;
+    connecting;
+    closing;
+    knownHost;
+    closed = false;
+    /** Creates a disconnected session. Call {@link connect} or another operation to connect. */
+    constructor(options) {
+        this.options = options;
+        this.knownHost = options.knownHost;
+    }
+    /**
+     * Verifies the gateway, resolves its public fallback when necessary, and
+     * selects the command and forwarding transport.
+     */
+    async connect() {
+        if (this.closed)
+            throw new Error("SSH session is closed");
+        if (this.transport)
+            return;
+        if (this.connecting)
+            return this.connecting;
+        this.connecting = this.connectWithFallback().catch((error) => {
+            this.connecting = undefined;
+            throw error;
+        });
+        return this.connecting;
+    }
+    async connectWithFallback() {
+        try {
+            await this.connectHost(this.options.host);
+        }
+        catch (error) {
+            if (!shouldResolvePublicGateway(this.options.host, error))
+                throw error;
+            const resolveAddresses = this.options.resolvePublicAddresses ?? resolvePublicGatewayAddresses;
+            let addresses;
+            try {
+                addresses = await resolveAddresses(this.options.host);
+            }
+            catch (resolveError) {
+                logger.warn("public Lakebox gateway resolution failed", {
+                    host: this.options.host,
+                    error: errorUtils.toError(resolveError),
+                });
+                throw error;
+            }
+            logger.warn("private Lakebox gateway unreachable; retrying public addresses", {
+                host: this.options.host,
+                addressCount: addresses.length,
+            });
+            let lastError = error;
+            for (const address of addresses) {
+                try {
+                    await this.connectHost(address);
+                    return;
+                }
+                catch (connectError) {
+                    lastError = connectError;
+                }
+            }
+            throw lastError;
+        }
+    }
+    async connectHost(connectHost) {
+        if (this.closed)
+            throw new Error("SSH session is closed");
+        const client = await this.createVerifiedClient(connectHost, true);
+        if (this.closed) {
+            client.destroy();
+            throw new Error("SSH session is closed");
+        }
+        try {
+            const transport = await createSshTransport({
+                host: this.options.host,
+                connectHost,
+                port: this.options.port,
+                username: this.options.username,
+                privateKeyPath: this.options.privateKeyPath,
+                knownHostsPath: this.options.knownHostsPath,
+                connectTimeoutMs: this.options.connectTimeoutMs,
+                ssh2Client: client,
+                createSsh2CommandClient: () => this.createVerifiedClient(connectHost, false),
+                transport: this.options.sshTransport,
+                ssh2Patch: this.options.ssh2Patch,
+                ...(this.options.sshCommand ? { sshCommand: this.options.sshCommand } : {}),
+            });
+            if (this.closed) {
+                await transport.close();
+                throw new Error("SSH session is closed");
+            }
+            this.transport = transport;
+            this.connecting = undefined;
+            if (transport.kind === "openssh")
+                client.destroy();
+        }
+        catch (error) {
+            client.destroy();
+            throw error;
+        }
+    }
+    createVerifiedClient(connectHost, rememberHost) {
+        return new Promise((resolve, reject) => {
+            if (this.closed) {
+                reject(new Error("SSH session is closed"));
+                return;
+            }
+            const client = new Client();
+            this.pendingClients.add(client);
+            let verifiedHost;
+            let settled = false;
+            const finishSettlement = () => {
+                this.pendingClients.delete(client);
+            };
+            client.once("ready", () => {
+                const finish = async () => {
+                    if (!verifiedHost)
+                        throw new Error("SSH gateway did not provide a verified host key");
+                    this.knownHost = verifiedHost.fingerprint;
+                    if (rememberHost) {
+                        await this.options.rememberHost?.(verifiedHost.fingerprint, verifiedHost.key);
+                    }
+                    settled = true;
+                    finishSettlement();
+                    resolve(client);
+                };
+                void finish().catch((error) => {
+                    client.destroy();
+                    if (settled)
+                        return;
+                    settled = true;
+                    finishSettlement();
+                    reject(error);
+                });
+            });
+            client.once("error", (error) => {
+                if (settled)
+                    return;
+                settled = true;
+                finishSettlement();
+                reject(error);
+            });
+            client.once("close", () => {
+                if (settled)
+                    return;
+                settled = true;
+                finishSettlement();
+                reject(new Error("SSH gateway closed before authentication completed"));
+            });
+            try {
+                client.connect({
+                    host: connectHost,
+                    port: this.options.port,
+                    username: this.options.username,
+                    privateKey: this.options.privateKey,
+                    readyTimeout: this.options.connectTimeoutMs,
+                    keepaliveInterval: 15_000,
+                    keepaliveCountMax: 3,
+                    hostVerifier: (key) => {
+                        const fingerprint = createHash("sha256").update(key).digest("base64");
+                        if (this.knownHost && fingerprint !== this.knownHost)
+                            return false;
+                        verifiedHost = { fingerprint, key: Buffer.from(key) };
+                        return true;
+                    },
+                });
+            }
+            catch (error) {
+                settled = true;
+                finishSettlement();
+                client.destroy();
+                reject(error);
+            }
+        });
+    }
+    /**
+     * Starts one command as a Lakebox user and returns its live output and
+     * completion state immediately.
+     */
+    execute(command, args, options) {
+        const { user, ...rest } = options;
+        return this.startCommand(command, args, rest, { kind: "user", ...user });
+    }
+    /**
+     * @internal Starts one fixed package-owned bootstrap command as root.
+     *
+     * Never route REST, agent-tool, service, or environment input here.
+     */
+    executePrivileged(command, args, options) {
+        return this.startCommand(command, args, options, { kind: "root" });
+    }
+    startCommand(command, args, options, identity) {
+        const script = sshCommandScript(command, args, options.cwd, options.env, identity);
+        const sshCommand = new SshCommand(command, args, options, async (execution) => {
+            await this.connect();
+            if (execution.signal.aborted)
+                return 130;
+            const transport = this.transport;
+            if (!transport)
+                throw new Error("SSH transport did not initialize");
+            return transport.run(script, execution);
+        });
+        this.activeCommands.add(sshCommand);
+        const remove = () => this.activeCommands.delete(sshCommand);
+        void sshCommand.result.then(remove, remove);
+        return sshCommand;
+    }
+    /** Opens a remote TCP connection through native SOCKS5 or ssh2 direct forwarding. */
+    async forwardOut(remoteHost, remotePort) {
+        await this.connect();
+        const transport = this.transport;
+        if (!transport)
+            throw new Error("SSH transport did not initialize");
+        return transport.connect(remoteHost, remotePort);
+    }
+    /** Cancels active commands, closes the selected transport, and clears connection state. */
+    close() {
+        if (this.closing)
+            return this.closing;
+        this.closed = true;
+        this.closing = this.closeResources();
+        return this.closing;
+    }
+    async closeResources() {
+        const cancellations = [...this.activeCommands].map((command) => command.cancel());
+        this.activeCommands.clear();
+        for (const client of this.pendingClients)
+            client.destroy();
+        this.pendingClients.clear();
+        const transport = this.transport;
+        const connecting = this.connecting;
+        this.transport = undefined;
+        this.connecting = undefined;
+        const results = await Promise.allSettled([
+            ...cancellations,
+            ...(transport ? [transport.close()] : []),
+            ...(connecting ? [connecting] : []),
+        ]);
+        for (const result of results) {
+            if (result.status === "rejected") {
+                logger.warn("failed to close SSH session resource", {
+                    error: errorUtils.toError(result.reason),
+                });
+            }
+        }
+    }
+}
+/**
+ * Resolves public IPv4 addresses for a Databricks service-direct gateway.
+ *
+ * Returns an empty list for other hostnames. DNS-over-HTTPS requests time out
+ * after five seconds and reject invalid responses.
+ */
+export async function resolvePublicGatewayAddresses(host, fetcher = fetch) {
+    if (!host.toLowerCase().endsWith(SERVICE_DIRECT_SUFFIX))
+        return [];
+    const response = await fetcher(`https://dns.google/resolve?name=${encodeURIComponent(host)}&type=A`, { headers: { Accept: "application/dns-json" }, signal: AbortSignal.timeout(5_000) });
+    if (!response.ok)
+        throw new Error(`Public DNS resolution failed (${response.status})`);
+    const payload = DnsResponseSchema.parse(await response.json());
+    return [
+        ...new Set((payload.Answer ?? [])
+            .filter((answer) => answer.type === 1 && isIP(answer.data) === 4)
+            .map((answer) => answer.data)),
+    ];
+}
+function shouldResolvePublicGateway(host, error) {
+    if (!host.toLowerCase().endsWith(SERVICE_DIRECT_SUFFIX))
+        return false;
+    const code = error?.code ??
+        error?.cause?.code;
+    return code === "EHOSTUNREACH" || code === "ENETUNREACH" || code === "ETIMEDOUT";
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/src/transport.d.ts

@@ -0,0 +1,15 @@
+import { z } from "zod";
+export declare const SshTransportModeSchema: z.ZodDefault<z.ZodPipe<z.ZodString, z.ZodEnum<{
+    auto: "auto";
+    openssh: "openssh";
+    ssh2: "ssh2";
+}>>>;
+/** SSH transport selected for a Lakebox session. */
+export type SshTransportMode = z.output<typeof SshTransportModeSchema>;
+export declare const Ssh2PatchModeSchema: z.ZodDefault<z.ZodPipe<z.ZodString, z.ZodEnum<{
+    true: "true";
+    false: "false";
+    auto: "auto";
+}>>>;
+/** Missing exec-reply patch policy applied when ssh2 is selected. */
+export type Ssh2PatchMode = z.output<typeof Ssh2PatchModeSchema>;

package/lib/src/transport.js

@@ -0,0 +1,16 @@
+import { z } from "zod";
+export const SshTransportModeSchema = z
+    .string()
+    .trim()
+    .toLowerCase()
+    .pipe(z.enum(["auto", "openssh", "ssh2"]))
+    .default("auto")
+    .describe("SSH transport: auto prefers native OpenSSH with SOCKS5 forwarding and otherwise selects ssh2; explicit modes never switch.");
+export const Ssh2PatchModeSchema = z
+    .string()
+    .trim()
+    .toLowerCase()
+    .pipe(z.enum(["auto", "true", "false"]))
+    .default("auto")
+    .describe("ssh2 missing-exec-reply workaround: auto patches only in development, true requires it, false never patches.");
+//# sourceMappingURL=data:application/json;base64,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

package/lib/tsconfig.tsbuildinfo

@@ -0,0 +1 @@
+{"root":["../src/_ssh.ts","../src/_ssh_openssh.ts","../src/_ssh_ssh2.ts","../src/key-store.ts","../src/lifecycle.ts","../src/rest.ts","../src/session.ts","../src/transport.ts","../index.ts"],"version":"5.9.3"}

package/package.json

@@ -1,6 +1,119 @@
 {
   "name": "@dbx-tools/lakebox",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "description": "Databricks Lakebox REST, pooled SSH transport, and deterministic user routing",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/reggie-db/dbx-tools.git",
+    "directory": "packages/js/node/lakebox"
+  },
+  "scripts": {
+    "build": "projen build",
+    "compile": "projen compile",
+    "default": "projen default",
+    "package": "projen package",
+    "post-compile": "projen post-compile",
+    "pre-compile": "projen pre-compile",
+    "prepack": "projen prepack",
+    "test": "projen test",
+    "watch": "projen watch",
+    "projen": "projen"
+  },
+  "devDependencies": {
+    "@types/node": "^24.6.0",
+    "@types/ssh2": "^1",
+    "typescript": "^5.9.3",
+    "vitest": "3.2.4"
+  },
+  "dependencies": {
+    "@dbx-tools/core": "^0.9.132",
+    "@dbx-tools/shared-core": "^0.9.132",
+    "@dbx-tools/shared-lakebox": "^0.9.132",
+    "generic-pool": "^3.9.0",
+    "socks": "^2.8.10",
+    "ssh2": "^1.17.0",
+    "zod": "4.3.6"
+  },
+  "main": "./lib/index.js",
+  "license": "Apache-2.0",
+  "publishConfig": {
+    "access": "public",
+    "main": "./lib/index.js",
+    "types": "./lib/index.d.ts",
+    "exports": {
+      ".": {
+        "types": "./lib/index.d.ts",
+        "default": "./lib/index.js"
+      },
+      "./key-store": {
+        "types": "./lib/src/key-store.d.ts",
+        "default": "./lib/src/key-store.js"
+      },
+      "./lifecycle": {
+        "types": "./lib/src/lifecycle.d.ts",
+        "default": "./lib/src/lifecycle.js"
+      },
+      "./rest": {
+        "types": "./lib/src/rest.d.ts",
+        "default": "./lib/src/rest.js"
+      },
+      "./session": {
+        "types": "./lib/src/session.d.ts",
+        "default": "./lib/src/session.js"
+      },
+      "./transport": {
+        "types": "./lib/src/transport.d.ts",
+        "default": "./lib/src/transport.js"
+      },
+      "./*": {
+        "types": "./lib/src/*/index.d.ts",
+        "default": "./lib/src/*/index.js"
+      },
+      "./package.json": "./package.json"
+    }
+  },
+  "version": "0.9.132",
+  "types": "./lib/index.d.ts",
+  "dbxToolsConfig": {
+    "tags": [
+      "node"
+    ]
+  },
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./key-store": {
+      "types": "./lib/src/key-store.d.ts",
+      "default": "./lib/src/key-store.js"
+    },
+    "./lifecycle": {
+      "types": "./lib/src/lifecycle.d.ts",
+      "default": "./lib/src/lifecycle.js"
+    },
+    "./rest": {
+      "types": "./lib/src/rest.d.ts",
+      "default": "./lib/src/rest.js"
+    },
+    "./session": {
+      "types": "./lib/src/session.d.ts",
+      "default": "./lib/src/session.js"
+    },
+    "./transport": {
+      "types": "./lib/src/transport.d.ts",
+      "default": "./lib/src/transport.js"
+    },
+    "./*": {
+      "types": "./lib/src/*/index.d.ts",
+      "default": "./lib/src/*/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "index.ts",
+    "src",
+    "lib"
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"bunx projen\"."
+}