@squadbase/connectors 0.0.11 → 0.0.13

package/dist/index.d.ts

@@ -161,6 +161,7 @@ declare const connectors: {
         role: ParameterDefinition;
         warehouse: ParameterDefinition;
         privateKeyBase64: ParameterDefinition;
+        privateKeyPassphrase: ParameterDefinition;
     }, {
         executeQuery: ConnectorTool<{
             connectionId: string;
@@ -481,6 +482,7 @@ declare const snowflakeConnector: ConnectorPlugin<{
     role: ParameterDefinition;
     warehouse: ParameterDefinition;
     privateKeyBase64: ParameterDefinition;
+    privateKeyPassphrase: ParameterDefinition;
 }, {
     executeQuery: ConnectorTool<{
         connectionId: string;

package/dist/index.js

@@ -271,11 +271,33 @@ var parameters3 = {
     type: "base64EncodedText",
     secret: true,
     required: true
+  }),
+  privateKeyPassphrase: new ParameterDefinition({
+    slug: "private-key-passphrase",
+    name: "Snowflake Private Key Passphrase",
+    description: "The passphrase for decrypting an encrypted private key. Leave empty if the key is not encrypted.",
+    envVarBaseKey: "SNOWFLAKE_PRIVATE_KEY_PASSPHRASE",
+    type: "text",
+    secret: true,
+    required: false
   })
 };
 
 // src/connectors/snowflake/tools/execute-query.ts
 import { z } from "zod";
+
+// src/connectors/snowflake/utils.ts
+import crypto from "crypto";
+function decryptPrivateKey(pem, passphrase) {
+  if (!passphrase) return pem;
+  return crypto.createPrivateKey({
+    key: pem,
+    format: "pem",
+    passphrase
+  }).export({ type: "pkcs8", format: "pem" });
+}
+
+// src/connectors/snowflake/tools/execute-query.ts
 var MAX_ROWS = 500;
 var QUERY_TIMEOUT_MS = 6e4;
 var inputSchema = z.object({
@@ -325,9 +347,11 @@ Avoid loading large amounts of data; always include LIMIT in queries.`,
       const role = parameters3.role.getValue(connection);
       const warehouse = parameters3.warehouse.getValue(connection);
       const privateKeyBase64 = parameters3.privateKeyBase64.getValue(connection);
-      const privateKey = Buffer.from(privateKeyBase64, "base64").toString(
+      const privateKeyPem = Buffer.from(privateKeyBase64, "base64").toString(
         "utf-8"
       );
+      const privateKeyPass = parameters3.privateKeyPassphrase.tryGetValue(connection);
+      const privateKey = decryptPrivateKey(privateKeyPem, privateKeyPass ?? void 0);
       const conn = snowflake.createConnection({
         account,
         username: user,
@@ -407,10 +431,12 @@ var snowflakeConnector = new ConnectorPlugin({
     try {
       const snowflake = (await import("snowflake-sdk")).default;
       snowflake.configure({ logLevel: "ERROR" });
-      const privateKey = Buffer.from(
+      const privateKeyPem = Buffer.from(
         params[parameters3.privateKeyBase64.slug],
         "base64"
       ).toString("utf-8");
+      const privateKeyPass = params[parameters3.privateKeyPassphrase.slug] || void 0;
+      const privateKey = decryptPrivateKey(privateKeyPem, privateKeyPass);
       const conn = snowflake.createConnection({
         account: params[parameters3.account.slug],
         username: params[parameters3.user.slug],
@@ -446,10 +472,12 @@ var snowflakeConnector = new ConnectorPlugin({
     const resolvedSql = replaceLiteralParams(sql, namedParams);
     const snowflake = (await import("snowflake-sdk")).default;
     snowflake.configure({ logLevel: "ERROR" });
-    const privateKey = Buffer.from(
+    const privateKeyPem = Buffer.from(
       params[parameters3.privateKeyBase64.slug],
       "base64"
     ).toString("utf-8");
+    const privateKeyPass = params[parameters3.privateKeyPassphrase.slug] || void 0;
+    const privateKey = decryptPrivateKey(privateKeyPem, privateKeyPass);
     const conn = snowflake.createConnection({
       account: params[parameters3.account.slug],
       username: params[parameters3.user.slug],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@squadbase/connectors",
-  "version": "0.0.11",
+  "version": "0.0.13",
   "description": "Squadbase Connectors",
   "type": "module",
   "main": "dist/index.js",
@@ -27,11 +27,9 @@
   },
   "scripts": {
     "build": "tsup",
-    "add-connector": "tsx scripts/add-connector.ts",
     "sync:dev1": "API_BASE_URL=https://dev1-api.squadbase.dev/v0 dotenv tsx scripts/sync-connectors.ts",
     "sync:dev2": "API_BASE_URL=https://dev2-api.squadbase.dev/v0 dotenv tsx scripts/sync-connectors.ts",
     "sync:prod": "API_BASE_URL=https://api.squadbase.dev/v0 dotenv tsx scripts/sync-connectors.ts",
-    "prepare-test-datasource": "tsx scripts/prepare-test-datasource.ts",
     "test": "vitest"
   },
   "peerDependencies": {