Function remove_endpoint

crates/openshell-policy/src/merge.rs:869–913

(policy: &mut SandboxPolicy, rule_name: Option<&str>, host: &str, port: u32)

}

fn remove_endpoint(policy: &mut SandboxPolicy, rule_name: Option<&str>, host: &str, port: u32) {
    let target_keys: Vec<String> = if let Some(rule_name) = rule_name {
        if policy.network_policies.contains_key(rule_name) {
            vec![rule_name.to_string()]
        } else {
            vec![]
        }
    } else {
        let mut keys: Vec<_> = policy.network_policies.keys().cloned().collect();
        keys.sort();
        keys
    };

    let mut empty_rules = Vec::new();
    for key in target_keys {
        if let Some(rule) = policy.network_policies.get_mut(&key) {
            rule.endpoints.retain_mut(|endpoint| {
                if !endpoint_matches_host_port(endpoint, host, port) {
                    return true;
                }

                let mut remaining_ports = canonical_ports(endpoint);
                remaining_ports.retain(|existing_port| *existing_port != port);
                remaining_ports.sort_unstable();
                remaining_ports.dedup();

                if remaining_ports.is_empty() {
                    return false;
                }

                endpoint.port = remaining_ports[0];
                endpoint.ports = remaining_ports;
                true
            });

            if rule.endpoints.is_empty() {
                empty_rules.push(key);
            }
        }
    }

    for key in empty_rules {
        policy.network_policies.remove(&key);
    }
}

#[cfg(test)]
mod tests {