config

type AuthConfig struct {
	AllowKeyless    *bool                 `json:"allow_keyless,omitempty"`
	UnknownIdentity string                `json:"unknown_identity,omitempty"`
	DefaultCwd      string                `json:"default_cwd,omitempty"`
	Docsets         map[string]DocsetSpec `json:"docsets"`
	Lore            map[string][]string   `json:"lore"`
	Identities      []AuthIdentity        `json:"identities"`
}

type AuthIdentity struct {
	Name      string   `json:"name"`
	Comment   string   `json:"comment,omitempty"`
	PublicKey string   `json:"public_key"`
	Lore      string   `json:"lore"`
	Publish   []string `json:"publish,omitempty"` // writable docsets; empty = all in lore
}

type Config struct {
	ConfigVersion   string
	Port            int
	MetricsPort     int
	HostKeyPath     string
	AllowKeyless    bool
	UnknownIdentity string // "allow" (default) or "deny"
	DefaultCwd      string
	MOTD            string
	AuthFile        string
	SkillsDir       string
	HTTPPort        int
	ExternalSSHPort int // advertised SSH port (for X-SSH-Port header behind a LB)
	TLSCert         string
	TLSKey          string
	CAKeysFile      string
	HostCertFile    string
	Files           FilesConfig
	Folders         []FolderConfig
	Passkeys        PasskeysConfig
	Logger          *slog.Logger
	// contains filtered or unexported fields
}

type DocsetSpec struct {
	Paths          []PathMapping `json:"paths"`
	PublishDir     string        `json:"publish_dir,omitempty"`
	MaxPublishSize int64         `json:"max_publish_size,omitempty"` // bytes; 0 = use default (2.5MB)
}

type FilesConfig struct {
	Allowed []string
	Denied  []string
	Ignore  []string
}

type FolderConfig struct {
	Name string
	Path string
}

type Option func(*Config) error

type PasskeysConfig struct {
	Enabled      bool
	RPID         string
	RPName       string
	RPOrigins    []string
	LorePath     string
	PasskeysFile string
	SessionTTL   string // parsed as time.Duration
}

type PathMapping struct {
	Source  string // the real path (relative to root dir or assets/lore)
	Display string // the path shown in bashfs (empty = same as Source)
}