repocfg

type Command struct {
	// Name is the key from the yaml map, e.g. "test".
	Name string
	// Description is the optional human-readable blurb shown in help/--list.
	Description string
	// Argv is the command split into tokens. argv[0] is the binary name as
	// resolved via $PATH at exec time. Every token has been run through
	Argv []string
	// Egress, when true, opts the command into the per-invocation CONNECT
	// proxy that consumers (coily) wire around exec. The audit row picks up
	Egress bool
	// AllowMetacharacters opts this command out of the shell-metacharacter
	// validator for both the YAML-declared argv tokens (skipped at load)
	AllowMetacharacters bool
}

type Config struct {
	// Path is the absolute path to the coily.yaml that produced this Config.
	Path string
	// Commands are sorted by Name. Safe to iterate directly for help output.
	Commands []Command
	// SSHTargets is the named ssh-passthrough target map keyed by alias.
	// Nil/empty when the file has no `ssh:` block. coilysiren/coily#187.
	SSHTargets map[string]SSHTarget
}

type SSHTarget struct {
	// Name is the host alias, e.g. "kai-server". Matches the map key it
	// was loaded under. Validated with the same rules as command names.
	Name string
	// User is the remote ssh user. Plain string; ssh handles the rest.
	User string
	// Host is the remote hostname (or hostname:port). Resolved by the
	// caller's ssh client; repocfg does not DNS-validate.
	Host string
	// WorkingDir is the absolute path of the working directory the remote
	// coily binds its --commit-scope to. Must be absolute (POSIX leading
	WorkingDir string
}