Function sandbox_ssh_proxy

crates/openshell-cli/src/ssh.rs:1322–1397

Run the SSH proxy, connecting stdin/stdout to the gateway.

(
    gateway_url: &str,
    sandbox_id: &str,
    token: &str,
    tls: &TlsOptions,
)

/// Run the SSH proxy, connecting stdin/stdout to the gateway.
pub async fn sandbox_ssh_proxy(
    gateway_url: &str,
    sandbox_id: &str,
    token: &str,
    tls: &TlsOptions,
) -> Result<()> {
    let server = grpc_server_from_ssh_gateway_url(gateway_url)?;
    let mut client = grpc_client(&server, tls).await?;

    let (tx, rx) = tokio::sync::mpsc::channel::<TcpForwardFrame>(16);
    tx.send(TcpForwardFrame {
        payload: Some(openshell_core::proto::tcp_forward_frame::Payload::Init(
            TcpForwardInit {
                sandbox_id: sandbox_id.to_string(),
                service_id: format!("ssh-proxy:{sandbox_id}"),
                target: Some(tcp_forward_init::Target::Ssh(SshRelayTarget {})),
                authorization_token: token.to_string(),
            },
        )),
    })
    .await
    .map_err(|_| miette::miette!("failed to initialize SSH forward stream"))?;

    let mut response = client
        .forward_tcp(ReceiverStream::new(rx))
        .await
        .into_diagnostic()?
        .into_inner();

    let stdin = tokio::io::stdin();
    let stdout = tokio::io::stdout();

    let to_remote = tokio::spawn(async move {
        let mut stdin = stdin;
        let mut buf = vec![0u8; 64 * 1024];
        while let Ok(n) = stdin.read(&mut buf).await {
            if n == 0 {
                break;
            }
            if tx
                .send(TcpForwardFrame {
                    payload: Some(openshell_core::proto::tcp_forward_frame::Payload::Data(
                        buf[..n].to_vec(),
                    )),
                })
                .await
                .is_err()
            {
                break;
            }
        }
    });
    let from_remote = tokio::spawn(async move {
        let mut stdout = stdout;
        loop {
            let Ok(Some(frame)) = response.message().await else {
                break;
            };