@enjoys/context-engine 1.4.1 → 1.4.2

package/data/hover/redis.json

@@ -1,40 +1,355 @@
-{
-  "language": "redis",
-  "hovers": {
-    "SET": {
-      "contents": [
-        {
-          "value": "**SET** — Redis keyword."
-        }
-      ]
-    },
-    "GET": {
-      "contents": [
-        {
-          "value": "**GET** — Redis keyword."
-        }
-      ]
-    },
-    "DEL": {
-      "contents": [
-        {
-          "value": "**DEL** — Redis keyword."
-        }
-      ]
-    },
-    "EXISTS": {
-      "contents": [
-        {
-          "value": "**EXISTS** — Redis keyword."
-        }
-      ]
-    },
-    "EXPIRE": {
-      "contents": [
-        {
-          "value": "**EXPIRE** — Redis keyword."
-        }
-      ]
-    }
-  }
-}
+{
+  "language": "redis",
+  "hovers": {
+    "SET": {
+      "contents": [
+        {
+          "value": "```redis\nSET key value [EX seconds] [PX milliseconds] [NX|XX] [KEEPTTL]\n```\n**SET** stores a string value at the given key. `EX` sets expiry in seconds, `PX` in milliseconds. `NX` sets only if key does not exist, `XX` only if it already exists. Returns OK on success."
+        }
+      ]
+    },
+    "GET": {
+      "contents": [
+        {
+          "value": "```redis\nGET key\n```\n**GET** retrieves the string value of a key. Returns the value or `nil` if the key does not exist. Only works with string values."
+        }
+      ]
+    },
+    "DEL": {
+      "contents": [
+        {
+          "value": "```redis\nDEL key [key ...]\n```\n**DEL** removes one or more keys and their associated values. Returns the number of keys removed. Blocking operation — for large datasets consider `UNLINK`."
+        }
+      ]
+    },
+    "EXISTS": {
+      "contents": [
+        {
+          "value": "```redis\nEXISTS key [key ...]\n```\n**EXISTS** checks if one or more keys exist. Returns the count of existing keys."
+        }
+      ]
+    },
+    "EXPIRE": {
+      "contents": [
+        {
+          "value": "```redis\nEXPIRE key seconds [NX|XX|GT|LT]\n```\n**EXPIRE** sets a timeout on a key in seconds. After expiry the key is automatically deleted. Returns 1 if set, 0 if key doesn't exist."
+        }
+      ]
+    },
+    "TTL": {
+      "contents": [
+        {
+          "value": "```redis\nTTL key\n```\n**TTL** returns the remaining time-to-live of a key in seconds. Returns `-1` if no expiry, `-2` if key does not exist."
+        }
+      ]
+    },
+    "PTTL": {
+      "contents": [
+        {
+          "value": "```redis\nPTTL key\n```\n**PTTL** returns the remaining time-to-live in milliseconds. Returns `-1` if no expiry, `-2` if key does not exist."
+        }
+      ]
+    },
+    "MSET": {
+      "contents": [
+        {
+          "value": "```redis\nMSET key1 value1 key2 value2 [key value ...]\n```\n**MSET** sets multiple keys to multiple values atomically. Always succeeds. Use `MSETNX` to set only if none of the keys exist."
+        }
+      ]
+    },
+    "MGET": {
+      "contents": [
+        {
+          "value": "```redis\nMGET key1 key2 [key ...]\n```\n**MGET** returns the values of all specified keys. For missing keys, `nil` is returned in that position."
+        }
+      ]
+    },
+    "INCR": {
+      "contents": [
+        {
+          "value": "```redis\nINCR key\n```\n**INCR** atomically increments the integer value of a key by 1. If the key doesn't exist, it's set to 0 before incrementing. Errors if value is not an integer."
+        }
+      ]
+    },
+    "INCRBY": {
+      "contents": [
+        {
+          "value": "```redis\nINCRBY key increment\n```\n**INCRBY** atomically increments the integer value by the given amount. Supports negative values for decrementing."
+        }
+      ]
+    },
+    "DECR": {
+      "contents": [
+        {
+          "value": "```redis\nDECR key\n```\n**DECR** atomically decrements the integer value of a key by 1."
+        }
+      ]
+    },
+    "APPEND": {
+      "contents": [
+        {
+          "value": "```redis\nAPPEND key value\n```\n**APPEND** appends a value to the end of a string key. Creates the key if it doesn't exist. Returns the new string length."
+        }
+      ]
+    },
+    "HSET": {
+      "contents": [
+        {
+          "value": "```redis\nHSET key field value [field value ...]\n```\n**HSET** sets one or more field-value pairs in a hash. Creates the hash if it doesn't exist. Returns the number of new fields added."
+        }
+      ]
+    },
+    "HGET": {
+      "contents": [
+        {
+          "value": "```redis\nHGET key field\n```\n**HGET** returns the value of a field in a hash. Returns `nil` if the field or key doesn't exist."
+        }
+      ]
+    },
+    "HGETALL": {
+      "contents": [
+        {
+          "value": "```redis\nHGETALL key\n```\n**HGETALL** returns all fields and values of a hash. Caution: expensive on large hashes — use `HSCAN` instead."
+        }
+      ]
+    },
+    "HDEL": {
+      "contents": [
+        {
+          "value": "```redis\nHDEL key field [field ...]\n```\n**HDEL** deletes one or more fields from a hash. Returns the number of fields removed."
+        }
+      ]
+    },
+    "HEXISTS": {
+      "contents": [
+        {
+          "value": "```redis\nHEXISTS key field\n```\n**HEXISTS** checks if a field exists in a hash. Returns 1 if present, 0 otherwise."
+        }
+      ]
+    },
+    "HINCRBY": {
+      "contents": [
+        {
+          "value": "```redis\nHINCRBY key field increment\n```\n**HINCRBY** atomically increments a hash field's integer value. Creates the field with 0 if it doesn't exist."
+        }
+      ]
+    },
+    "LPUSH": {
+      "contents": [
+        {
+          "value": "```redis\nLPUSH key element [element ...]\n```\n**LPUSH** inserts elements at the head (left) of a list. Creates the list if it doesn't exist. Returns the new list length."
+        }
+      ]
+    },
+    "RPUSH": {
+      "contents": [
+        {
+          "value": "```redis\nRPUSH key element [element ...]\n```\n**RPUSH** inserts elements at the tail (right) of a list. Returns the new length."
+        }
+      ]
+    },
+    "LPOP": {
+      "contents": [
+        {
+          "value": "```redis\nLPOP key [count]\n```\n**LPOP** removes and returns the first element(s) from a list. Returns `nil` if empty."
+        }
+      ]
+    },
+    "RPOP": {
+      "contents": [
+        {
+          "value": "```redis\nRPOP key [count]\n```\n**RPOP** removes and returns the last element(s) from a list."
+        }
+      ]
+    },
+    "LRANGE": {
+      "contents": [
+        {
+          "value": "```redis\nLRANGE key start stop\n```\n**LRANGE** returns a range of elements from a list. `LRANGE key 0 -1` returns the entire list."
+        }
+      ]
+    },
+    "LLEN": {
+      "contents": [
+        {
+          "value": "```redis\nLLEN key\n```\n**LLEN** returns the length of a list. Returns 0 if the key doesn't exist."
+        }
+      ]
+    },
+    "SADD": {
+      "contents": [
+        {
+          "value": "```redis\nSADD key member [member ...]\n```\n**SADD** adds members to a set. Ignores duplicates. Returns the number of new members added."
+        }
+      ]
+    },
+    "SMEMBERS": {
+      "contents": [
+        {
+          "value": "```redis\nSMEMBERS key\n```\n**SMEMBERS** returns all members of a set. Use `SSCAN` for large sets."
+        }
+      ]
+    },
+    "SISMEMBER": {
+      "contents": [
+        {
+          "value": "```redis\nSISMEMBER key member\n```\n**SISMEMBER** checks if a member exists in a set. Returns 1 if present, 0 otherwise. O(1)."
+        }
+      ]
+    },
+    "SREM": {
+      "contents": [
+        {
+          "value": "```redis\nSREM key member [member ...]\n```\n**SREM** removes members from a set. Returns the number removed."
+        }
+      ]
+    },
+    "ZADD": {
+      "contents": [
+        {
+          "value": "```redis\nZADD key [NX|XX] [GT|LT] [CH] score member [score member ...]\n```\n**ZADD** adds members with scores to a sorted set. `NX` only adds new, `XX` only updates existing, `CH` returns changed count."
+        }
+      ]
+    },
+    "ZRANGE": {
+      "contents": [
+        {
+          "value": "```redis\nZRANGE key min max [BYSCORE|BYLEX] [REV] [LIMIT offset count] [WITHSCORES]\n```\n**ZRANGE** returns members from a sorted set by index, score, or lex range. `WITHSCORES` includes scores."
+        }
+      ]
+    },
+    "ZRANK": {
+      "contents": [
+        {
+          "value": "```redis\nZRANK key member\n```\n**ZRANK** returns the 0-based rank of a member ordered by score (low to high). Returns `nil` if not found."
+        }
+      ]
+    },
+    "SUBSCRIBE": {
+      "contents": [
+        {
+          "value": "```redis\nSUBSCRIBE channel [channel ...]\n```\n**SUBSCRIBE** listens for messages on channels. The client enters subscriber mode and can only use SUBSCRIBE/UNSUBSCRIBE/PING."
+        }
+      ]
+    },
+    "PUBLISH": {
+      "contents": [
+        {
+          "value": "```redis\nPUBLISH channel message\n```\n**PUBLISH** sends a message to all subscribers of a channel. Returns the number of clients that received it."
+        }
+      ]
+    },
+    "PSUBSCRIBE": {
+      "contents": [
+        {
+          "value": "```redis\nPSUBSCRIBE pattern [pattern ...]\n```\n**PSUBSCRIBE** subscribes to channels matching a glob pattern. `*` matches any sequence, `?` one character."
+        }
+      ]
+    },
+    "KEYS": {
+      "contents": [
+        {
+          "value": "```redis\nKEYS pattern\n```\n**KEYS** returns all keys matching a glob pattern. **Warning:** blocks the server on large datasets. Use `SCAN` in production."
+        }
+      ]
+    },
+    "SCAN": {
+      "contents": [
+        {
+          "value": "```redis\nSCAN cursor [MATCH pattern] [COUNT count] [TYPE type]\n```\n**SCAN** iterates keys incrementally. Cursor 0 means complete. Non-blocking alternative to `KEYS`."
+        }
+      ]
+    },
+    "TYPE": {
+      "contents": [
+        {
+          "value": "```redis\nTYPE key\n```\n**TYPE** returns the data type: `string`, `list`, `set`, `zset`, `hash`, `stream`, or `none`."
+        }
+      ]
+    },
+    "PERSIST": {
+      "contents": [
+        {
+          "value": "```redis\nPERSIST key\n```\n**PERSIST** removes the expiration from a key. Returns 1 if removed, 0 if key has no expiry or doesn't exist."
+        }
+      ]
+    },
+    "RENAME": {
+      "contents": [
+        {
+          "value": "```redis\nRENAME key newkey\n```\n**RENAME** renames a key. Overwrites `newkey` if it exists. Use `RENAMENX` to rename only if newkey doesn't exist."
+        }
+      ]
+    },
+    "UNLINK": {
+      "contents": [
+        {
+          "value": "```redis\nUNLINK key [key ...]\n```\n**UNLINK** removes keys asynchronously in a background thread. Non-blocking alternative to `DEL`."
+        }
+      ]
+    },
+    "MULTI": {
+      "contents": [
+        {
+          "value": "```redis\nMULTI\nSET key1 val1\nSET key2 val2\nEXEC\n```\n**MULTI** starts a transaction. Commands are queued until `EXEC`. `DISCARD` cancels."
+        }
+      ]
+    },
+    "EXEC": {
+      "contents": [
+        {
+          "value": "```redis\nEXEC\n```\n**EXEC** executes all queued commands after `MULTI` atomically. Returns `nil` if `WATCH` detected changes."
+        }
+      ]
+    },
+    "WATCH": {
+      "contents": [
+        {
+          "value": "```redis\nWATCH key [key ...]\n```\n**WATCH** implements optimistic locking. If any watched key changes before `EXEC`, the transaction aborts."
+        }
+      ]
+    },
+    "XADD": {
+      "contents": [
+        {
+          "value": "```redis\nXADD key [MAXLEN|MINID [=|~] threshold] * field value [field value ...]\n```\n**XADD** appends an entry to a stream. `*` auto-generates the ID. `MAXLEN ~` trims approximately."
+        }
+      ]
+    },
+    "XREAD": {
+      "contents": [
+        {
+          "value": "```redis\nXREAD [COUNT count] [BLOCK milliseconds] STREAMS key [key ...] id [id ...]\n```\n**XREAD** reads entries from streams. `BLOCK 0` waits indefinitely. Use `$` to read only new entries."
+        }
+      ]
+    },
+    "INFO": {
+      "contents": [
+        {
+          "value": "```redis\nINFO [section]\n```\n**INFO** returns server information. Sections: `server`, `clients`, `memory`, `stats`, `replication`, `cpu`, `keyspace`, `all`."
+        }
+      ]
+    },
+    "CONFIG": {
+      "contents": [
+        {
+          "value": "```redis\nCONFIG GET parameter\nCONFIG SET parameter value\n```\n**CONFIG** reads or modifies server configuration at runtime. Use `CONFIG REWRITE` to persist changes."
+        }
+      ]
+    },
+    "SELECT": {
+      "contents": [
+        {
+          "value": "```redis\nSELECT index\n```\n**SELECT** switches to a different database (0-15 by default). Database 0 is the default."
+        }
+      ]
+    },
+    "FLUSHDB": {
+      "contents": [
+        {
+          "value": "```redis\nFLUSHDB [ASYNC|SYNC]\n```\n**FLUSHDB** deletes all keys in the current database. `ASYNC` performs deletion in background. **Destructive.**"
+        }
+      ]
+    }
+  }
+}

package/data/hover/ssh_config.json

@@ -4,42 +4,287 @@
     "Host": {
       "contents": [
         {
-          "value": "```\nHost myserver\n    HostName 10.0.1.50\n    User deploy\n\nHost *.internal\n    ProxyJump bastion\n\nHost *\n    ServerAliveInterval 60\n```\n**Host** blocks match by name/pattern. `Host *` sets defaults. Wildcards and negation (`!pattern`) are supported."
+          "value": "```ssh_config\nHost myserver\n    HostName 10.0.1.50\n    User deploy\n\nHost *.internal\n    ProxyJump bastion\n\nHost *\n    ServerAliveInterval 60\n```\n**Host** blocks match by name/pattern. `Host *` sets defaults. Wildcards and negation (`!pattern`) supported."
+        }
+      ]
+    },
+    "HostName": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost myserver\n    HostName 192.168.1.100\n\nHost staging\n    HostName staging.example.com\n```\n**HostName** specifies the real hostname or IP to connect to. Allows the `Host` alias to differ from the actual address."
+        }
+      ]
+    },
+    "User": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost production\n    User deploy\n\nHost *\n    User myusername\n```\n**User** sets the login username. Overrides the default (current local user) for specific hosts."
+        }
+      ]
+    },
+    "Port": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost myserver\n    Port 2222\n\nHost *\n    Port 22\n```\n**Port** specifies the remote SSH port. Default is 22. Some servers use non-standard ports for security."
         }
       ]
     },
     "IdentityFile": {
       "contents": [
         {
-          "value": "```\nIdentityFile ~/.ssh/id_ed25519\nIdentityFile ~/.ssh/work_key\n```\n**IdentityFile** specifies the private key. Multiple keys can be listed - SSH tries them in order. Ed25519 keys are recommended."
+          "value": "```ssh_config\nIdentityFile ~/.ssh/id_ed25519\nIdentityFile ~/.ssh/work_key\n```\n**IdentityFile** specifies the private key file. Multiple keys can be listed — SSH tries them in order."
+        }
+      ]
+    },
+    "IdentitiesOnly": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost work\n    IdentityFile ~/.ssh/work_key\n    IdentitiesOnly yes\n```\n**IdentitiesOnly** restricts authentication to the specified IdentityFile(s) only, ignoring keys from ssh-agent."
         }
       ]
     },
     "ProxyJump": {
       "contents": [
         {
-          "value": "```\nHost internal\n    HostName 10.0.1.50\n    ProxyJump bastion\n\n# Equivalent to:\n# ssh -J bastion internal\n```\n**ProxyJump** connects through a bastion/jump host. Supports chaining: `ProxyJump host1,host2`."
+          "value": "```ssh_config\nHost internal\n    HostName 10.0.1.50\n    ProxyJump bastion\n\n# Chaining: ProxyJump host1,host2\n```\n**ProxyJump** connects through a bastion/jump host. Supports chaining multiple jumps."
+        }
+      ]
+    },
+    "ProxyCommand": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost internal\n    ProxyCommand ssh -W %h:%p bastion\n\nHost corporate\n    ProxyCommand nc -x proxy:1080 %h %p\n```\n**ProxyCommand** specifies a command to connect to the server. `%h` and `%p` are replaced with host and port."
         }
       ]
     },
     "LocalForward": {
       "contents": [
         {
-          "value": "```\nLocalForward 5432 db-server:5432\nLocalForward 8080 localhost:80\n\n# Then connect:\n# psql -h localhost -p 5432\n```\n**LocalForward** tunnels a local port to a remote destination via SSH. Great for accessing internal databases."
+          "value": "```ssh_config\nLocalForward 5432 db-server:5432\nLocalForward 8080 localhost:80\n```\n**LocalForward** tunnels a local port to a remote destination via SSH. Great for accessing internal databases."
+        }
+      ]
+    },
+    "RemoteForward": {
+      "contents": [
+        {
+          "value": "```ssh_config\nRemoteForward 8080 localhost:3000\n```\n**RemoteForward** makes a local service accessible from the remote host. The remote port forwards back to local."
+        }
+      ]
+    },
+    "DynamicForward": {
+      "contents": [
+        {
+          "value": "```ssh_config\nDynamicForward 1080\n```\n**DynamicForward** creates a SOCKS proxy on the specified local port. All traffic through the proxy is tunneled over SSH."
         }
       ]
     },
     "ForwardAgent": {
       "contents": [
         {
-          "value": "```\nForwardAgent yes\n\n# Security warning: only enable for trusted hosts\n# Allows the remote host to use your SSH keys\n```\n**ForwardAgent** forwards your SSH agent. Useful for hopping between hosts but poses a security risk on untrusted servers."
+          "value": "```ssh_config\nForwardAgent yes\n# Security: only enable for trusted hosts\n```\n**ForwardAgent** forwards your SSH agent to the remote host. Useful for multi-hop but risky on untrusted servers."
         }
       ]
     },
     "ServerAliveInterval": {
       "contents": [
         {
-          "value": "```\nHost *\n    ServerAliveInterval 60\n    ServerAliveCountMax 3\n```\n**ServerAliveInterval** sends keep-alive packets every N seconds. With CountMax=3, connection drops after 180s of no response. Prevents idle disconnections."
+          "value": "```ssh_config\nHost *\n    ServerAliveInterval 60\n    ServerAliveCountMax 3\n```\n**ServerAliveInterval** sends keep-alive packets every N seconds. Prevents idle disconnections."
+        }
+      ]
+    },
+    "ServerAliveCountMax": {
+      "contents": [
+        {
+          "value": "```ssh_config\nServerAliveCountMax 3\n```\n**ServerAliveCountMax** sets how many keep-alive messages can go unanswered before disconnecting. With interval 60 and max 3, timeout is 180s."
+        }
+      ]
+    },
+    "AddKeysToAgent": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost *\n    AddKeysToAgent yes\n```\n**AddKeysToAgent** automatically adds keys to the running ssh-agent after first use. Values: `yes`, `no`, `ask`, `confirm`, or a time limit."
+        }
+      ]
+    },
+    "StrictHostKeyChecking": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost *\n    StrictHostKeyChecking ask\n\nHost *.test\n    StrictHostKeyChecking no\n    UserKnownHostsFile /dev/null\n```\n**StrictHostKeyChecking** controls host key verification. `ask` (default) prompts, `yes` rejects unknown, `no` accepts all (insecure)."
+        }
+      ]
+    },
+    "UserKnownHostsFile": {
+      "contents": [
+        {
+          "value": "```ssh_config\nUserKnownHostsFile ~/.ssh/known_hosts\nUserKnownHostsFile /dev/null\n```\n**UserKnownHostsFile** specifies the file for storing known host keys. Use `/dev/null` to disable (with `StrictHostKeyChecking no`)."
+        }
+      ]
+    },
+    "Compression": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost slow-link\n    Compression yes\n```\n**Compression** enables zlib compression. Useful for slow connections but can increase latency on fast ones."
+        }
+      ]
+    },
+    "TCPKeepAlive": {
+      "contents": [
+        {
+          "value": "```ssh_config\nTCPKeepAlive yes\n```\n**TCPKeepAlive** sends TCP keepalive messages to detect dead connections. Different from `ServerAliveInterval` (application-level)."
+        }
+      ]
+    },
+    "ControlMaster": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost *\n    ControlMaster auto\n    ControlPath ~/.ssh/sockets/%r@%h-%p\n    ControlPersist 600\n```\n**ControlMaster** enables connection multiplexing. Subsequent connections to the same host reuse the existing TCP connection."
+        }
+      ]
+    },
+    "ControlPath": {
+      "contents": [
+        {
+          "value": "```ssh_config\nControlPath ~/.ssh/sockets/%r@%h-%p\n```\n**ControlPath** specifies the Unix socket file for connection multiplexing. `%r` = user, `%h` = host, `%p` = port."
+        }
+      ]
+    },
+    "ControlPersist": {
+      "contents": [
+        {
+          "value": "```ssh_config\nControlPersist 600\nControlPersist yes\n```\n**ControlPersist** keeps the master connection open after the last session closes. Value in seconds, or `yes` for indefinite."
+        }
+      ]
+    },
+    "Match": {
+      "contents": [
+        {
+          "value": "```ssh_config\nMatch host *.internal user deploy\n    ProxyJump bastion\n\nMatch exec \"test -f ~/.ssh/work_key\"\n    IdentityFile ~/.ssh/work_key\n```\n**Match** applies settings conditionally by host, user, or command result. More flexible than `Host`."
+        }
+      ]
+    },
+    "Include": {
+      "contents": [
+        {
+          "value": "```ssh_config\nInclude ~/.ssh/config.d/*\nInclude ~/.ssh/work_config\n```\n**Include** imports other config files. Supports glob patterns. Useful for splitting configs by project or team."
+        }
+      ]
+    },
+    "LogLevel": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost problematic\n    LogLevel DEBUG3\n\nHost *\n    LogLevel ERROR\n```\n**LogLevel** controls SSH client logging verbosity. Levels: `QUIET`, `FATAL`, `ERROR`, `INFO`, `VERBOSE`, `DEBUG`, `DEBUG1`-`DEBUG3`."
+        }
+      ]
+    },
+    "RequestTTY": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost scripts\n    RequestTTY no\n\nHost interactive\n    RequestTTY force\n```\n**RequestTTY** controls pseudo-terminal allocation. `no` for scripts, `force` for interactive. Equivalent to `-t`/`-T` flags."
+        }
+      ]
+    },
+    "BatchMode": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost automated\n    BatchMode yes\n```\n**BatchMode** disables password prompting and host key confirmation. Useful for scripts where no user interaction is possible."
+        }
+      ]
+    },
+    "ConnectTimeout": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost *\n    ConnectTimeout 10\n```\n**ConnectTimeout** sets the connection timeout in seconds. Default uses the system TCP timeout."
+        }
+      ]
+    },
+    "ConnectionAttempts": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost unreliable\n    ConnectionAttempts 3\n```\n**ConnectionAttempts** specifies the number of connection retry attempts before giving up. Default is 1."
+        }
+      ]
+    },
+    "Ciphers": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost *\n    Ciphers aes256-gcm@openssh.com,chacha20-poly1305@openssh.com\n```\n**Ciphers** specifies allowed encryption algorithms in preference order."
+        }
+      ]
+    },
+    "KexAlgorithms": {
+      "contents": [
+        {
+          "value": "```ssh_config\nKexAlgorithms curve25519-sha256,diffie-hellman-group16-sha512\n```\n**KexAlgorithms** specifies allowed key exchange algorithms. Modern setups prefer curve25519."
+        }
+      ]
+    },
+    "PubkeyAuthentication": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost *\n    PubkeyAuthentication yes\n    PasswordAuthentication no\n```\n**PubkeyAuthentication** enables/disables public key authentication. Best practice: enable keys, disable passwords."
+        }
+      ]
+    },
+    "PasswordAuthentication": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost legacy-server\n    PasswordAuthentication yes\n\nHost *\n    PasswordAuthentication no\n```\n**PasswordAuthentication** controls password-based login. Disable for security when key auth is available."
+        }
+      ]
+    },
+    "ForwardX11": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost desktop\n    ForwardX11 yes\n    ForwardX11Trusted yes\n```\n**ForwardX11** enables X11 forwarding for running graphical applications remotely. `Trusted` bypasses X11 security."
+        }
+      ]
+    },
+    "SendEnv": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost *\n    SendEnv LANG LC_*\n    SetEnv MY_VAR=value\n```\n**SendEnv** sends local environment variables to the remote server. Server must accept them via `AcceptEnv`."
+        }
+      ]
+    },
+    "SetEnv": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost staging\n    SetEnv ENV=staging\n    SetEnv DEBUG=1\n```\n**SetEnv** sets environment variables on the remote session. Does not require server-side `AcceptEnv` configuration."
+        }
+      ]
+    },
+    "PermitLocalCommand": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost *\n    PermitLocalCommand yes\n    LocalCommand echo \"Connected to %h\"\n```\n**PermitLocalCommand** allows running local commands after connecting. `LocalCommand` specifies the command."
+        }
+      ]
+    },
+    "CanonicalizeHostname": {
+      "contents": [
+        {
+          "value": "```ssh_config\nCanonicalizeHostname yes\nCanonicalDomains example.com internal.example.com\n```\n**CanonicalizeHostname** resolves short hostnames to FQDNs using `CanonicalDomains`. Useful in corporate networks."
+        }
+      ]
+    },
+    "AddressFamily": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost *\n    AddressFamily inet\n```\n**AddressFamily** restricts connections to `inet` (IPv4), `inet6` (IPv6), or `any` (default). Use `inet` to avoid IPv6 issues."
+        }
+      ]
+    },
+    "PreferredAuthentications": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost *\n    PreferredAuthentications publickey,keyboard-interactive,password\n```\n**PreferredAuthentications** sets the order of authentication methods to try."
+        }
+      ]
+    },
+    "GSSAPIAuthentication": {
+      "contents": [
+        {
+          "value": "```ssh_config\nHost *.corp.example.com\n    GSSAPIAuthentication yes\n    GSSAPIDelegateCredentials yes\n\nHost *\n    GSSAPIAuthentication no\n```\n**GSSAPIAuthentication** enables Kerberos/GSSAPI authentication. Common in corporate environments with Active Directory."
         }
       ]
     }