Function applyNegatedExecMatch

src/node/runtime/sshConfigParser.ts:177–231

* Handle `Match host ... !exec ...` blocks that ssh-config doesn't evaluate. * * Limitation: Only applies ProxyCommand from matching Match blocks. Other directives * like User, Port, IdentityFile in the same block are ignored. This is sufficient for * Coder configs which only set ProxyCommand in

(
  config: SSHConfig,
  hostName: string,
  user: string | undefined,
  computed: Record<string, ComputedConfigValue>
)

 * Coder configs which only set ProxyCommand in Match blocks.
 */
function applyNegatedExecMatch(
  config: SSHConfig,
  hostName: string,
  user: string | undefined,
  computed: Record<string, ComputedConfigValue>
): void {
  if (getConfigValue(computed, "ProxyCommand")) {
    return;
  }

  for (const line of config) {
    if (line.type !== SSHConfig.DIRECTIVE || line.param !== "Match") {
      continue;
    }

    if (!("criteria" in line)) {
      continue;
    }

    const criteria = line.criteria as Record<string, MatchCriteriaValue>;
    const hostCriterion = getCriteriaValue(criteria, "host");
    const negatedExec = getCriteriaValue(criteria, "!exec");

    if (!hostCriterion || !negatedExec) {
      continue;
    }

    const hostPatterns = criteriaToStringArray(hostCriterion);
    if (!glob(hostPatterns, hostName)) {
      continue;
    }

    const execCommand = criteriaToString(negatedExec);
    if (!execCommand) {
      continue;
    }

    const expandedCommand = expandMatchExecTokens(execCommand, hostName, user);
    const execResult = spawnSync(expandedCommand, { shell: true });

    if (execResult.status === 0) {
      continue;
    }

    const proxyLine = line.config.find(
      (subline) =>
        subline.type === SSHConfig.DIRECTIVE && subline.param.toLowerCase() === "proxycommand"
    );

    if (proxyLine?.type === SSHConfig.DIRECTIVE) {
      computed.ProxyCommand = proxyLine.value as ComputedConfigValue;
      return;
    }
  }
}

function toStringArray(value: ComputedConfigValue | undefined): string[] {
  if (typeof value === "string") {