【进阶实战】堡垒机：生产权限的集中入口封装

local vault = { accounts = { "admin", "ops01", "ops02" } }
local sessions = {}
local function openSession(user, target)
    for _, a in ipairs(vault.accounts) do
        if a == user then
            sessions[user] = { target = target, since = os.time(),
                cmds = {} }
            print("[堡垒] " .. user .. " 接入 " .. target)
            return true
        end
    end
    print("[堡垒] 无堡垒账号，拒绝接入")
    return false
end
local function runCommand(user, cmd)
    local s = sessions[user]
    if s == nil then
        return false
    end
    s.cmds[#s.cmds + 1] = os.time() .. "|" .. cmd
    return execOnTarget(s.target, cmd)
end
local function closeSession(user)
    local s = sessions[user]
    if s then
        archiveSession(user, s)
        sessions[user] = nil
    end
end

local function archiveSession(user, s)
    print("[堡垒] 会话归档 " .. user .. " 命令 " .. #s.cmds .. " 条")
end