Function outer_ssh_forward_matches

crates/openshell-core/src/forward.rs:337–384

(args: &[&str], port: u16, prefix_has_no_command: bool)

}

fn outer_ssh_forward_matches(args: &[&str], port: u16, prefix_has_no_command: bool) -> bool {
    let Some(forward_args) = args.strip_suffix(&["sandbox"]) else {
        return false;
    };
    let mut saw_no_command = prefix_has_no_command;
    let mut saw_forward = false;
    let mut current = 0;

    while current < forward_args.len() {
        let arg = forward_args[current];
        match arg {
            "-N" => {
                saw_no_command = true;
                current += 1;
            }
            "-f" | "-T" | "-tt" => {
                current += 1;
            }
            "-o" => {
                if current + 1 >= forward_args.len() {
                    return false;
                }
                current += 2;
            }
            "-L" => {
                let Some(candidate) = forward_args.get(current + 1) else {
                    return false;
                };
                saw_forward |= ssh_forward_arg_matches_openshell_loopback_port(candidate, port);
                current += 2;
            }
            _ if arg.starts_with("-L") => {
                let Some(candidate) = arg.strip_prefix("-L").filter(|value| !value.is_empty())
                else {
                    return false;
                };
                saw_forward |= ssh_forward_arg_matches_openshell_loopback_port(candidate, port);
                current += 1;
            }
            _ if arg.starts_with("-o") || arg.starts_with("-v") => {
                current += 1;
            }
            _ => return false,
        }
    }

    saw_no_command && saw_forward
}

fn expected_sandbox_id_from_record(record: &ForwardPidRecord) -> Option<&str> {
    // Legacy one-field PID files are cleanup records, not signal authority.