ssh

type Config struct {
	// Address to listen on (e.g., ":2222")
	Address string

	// HostKeyPath is the path to the SSH host key file.
	// If the file doesn't exist, a new key will be generated.
	HostKeyPath string

	// SandboxProvider is used to route connections to containers.
	SandboxProvider sandbox.Provider

	// SandboxEnsurer is called on each incoming connection to ensure the sandbox
	// is started before channels are opened. If nil, connections to non-running
	// sandboxes are rejected.
	SandboxEnsurer SandboxEnsurer

	// UserInfoFetcher is used to get the default user for sandbox sessions.
	// If nil, commands run as root.
	UserInfoFetcher UserInfoFetcher

	// EnvVarFetcher is used to get environment variables from the session. If nil,
	// no runtime-managed env vars are applied.
	EnvVarFetcher EnvVarFetcher

	// ConnectionTracker is notified when SSH connections are established and closed.
	// If nil, connection tracking is disabled.
	ConnectionTracker ConnectionTracker
}

type ConnectionTracker interface {
	// Track registers an active connection for sessionID and returns a release
	// function that must be called when the connection ends.
	Track(sessionID string) func()
}

type EnvVarFetcher interface {
	// GetEnvVarsForSession returns the merged environment variables to inject into
	// SSH sessions before applying client-provided env overrides.
	GetEnvVarsForSession(ctx context.Context, sessionID string) (map[string]string, error)
}

type SandboxEnsurer interface {
	EnsureSandboxReady(ctx context.Context, sessionID string) error
}

type Server struct {
	// contains filtered or unexported fields
}

type UserInfoFetcher interface {
	// GetUserInfo returns the default user for a sandbox.
	// Returns username, uid, gid, and any error.
	GetUserInfo(ctx context.Context, sessionID string) (username string, uid, gid int, err error)
}