(command.CommandList
  children: [
    (command.ShAssignment
      pairs: [
        (assign_pair
          lhs: (sh_lhs_expr.Name name:tid)
          op: assign_op.Equal
          rhs: {(DQ <'proxy connect'>)}
          spids: [7]
        )
      ]
    )
    (C {<mv>} {($ Id.VSub_DollarName '$OBJ') <'/sshd_proxy'>} 
      {($ Id.VSub_DollarName '$OBJ') <'/sshd_proxy.orig'>}
    )
    (command.ForEach
      iter_name: ps
      iter_words: [{<no>} {<yes>}]
      do_arg_iter: F
      body: 
        (command.DoGroup
          children: [
            (C {<cp>} {($ Id.VSub_DollarName '$OBJ') <'/sshd_proxy.orig'>} 
              {($ Id.VSub_DollarName '$OBJ') <'/sshd_proxy'>}
            )
            (command.Simple
              words: [{<echo>} {(DQ <'UsePrivilegeSeparation '> ($ Id.VSub_DollarName '$ps'))}]
              redirects: [
                (redir
                  op: <Id.Redir_DGreat '>>'>
                  loc: (redir_loc.Fd fd:1)
                  arg: {($ Id.VSub_DollarName '$OBJ') <'/sshd_proxy'>}
                )
              ]
              do_fork: T
            )
            (command.ForEach
              iter_name: p
              iter_words: [{(${ Id.VSub_Name SSH_PROTOCOLS)}]
              do_arg_iter: F
              body: 
                (command.DoGroup
                  children: [
                    (command.ForEach
                      iter_name: c
                      iter_words: [{<no>} {<yes>}]
                      do_arg_iter: F
                      body: 
                        (command.DoGroup
                          children: [
                            (C {<verbose>} 
                              {
                                (DQ <'plain username protocol '> ($ Id.VSub_DollarName '$p') 
                                  <' privsep='> ($ Id.VSub_DollarName '$ps') <' comp='> ($ Id.VSub_DollarName '$c')
                                )
                              }
                            )
                            (command.ShAssignment
                              pairs: [
                                (assign_pair
                                  lhs: (sh_lhs_expr.Name name:opts)
                                  op: assign_op.Equal
                                  rhs: 
                                    {
                                      (DQ <-> ($ Id.VSub_DollarName '$p') <' -oCompression='> 
                                        ($ Id.VSub_DollarName '$c') <' -F '> ($ Id.VSub_DollarName '$OBJ') <'/ssh_proxy'>
                                      )
                                    }
                                  spids: [99]
                                )
                              ]
                            )
                            (command.ShAssignment
                              pairs: [
                                (assign_pair
                                  lhs: (sh_lhs_expr.Name name:SSH_CONNECTION)
                                  op: assign_op.Equal
                                  rhs: 
                                    {
                                      (command_sub
                                        left_token: <Id.Left_Backtick '`'>
                                        child: 
                                          (C {(${ Id.VSub_Name SSH)} {($ Id.VSub_DollarName '$opts')} 
                                            {<999.999.999.999>} {(SQ <'echo $SSH_CONNECTION'>)}
                                          )
                                      )
                                    }
                                  spids: [111]
                                )
                              ]
                            )
                            (command.If
                              arms: [
                                (if_arm
                                  cond: 
                                    (condition.Shell
                                      commands: [
                                        (command.Sentence
                                          child: 
                                            (C {<Id.Lit_LBracket '['>} {($ Id.VSub_QMark '$?')} {<-ne>} 
                                              {<0>} {<Id.Lit_RBracket ']'>}
                                            )
                                          terminator: <Id.Op_Semi _>
                                        )
                                      ]
                                    )
                                  action: [
                                    (C {<fail>} 
                                      {
                                        (DQ <'ssh proxyconnect protocol '> ($ Id.VSub_DollarName '$p') 
                                          <' privsep='> ($ Id.VSub_DollarName '$ps') <' comp='> ($ Id.VSub_DollarName '$c') <' failed'>
                                        )
                                      }
                                    )
                                  ]
                                  spids: [129 142]
                                )
                              ]
                            )
                            (command.If
                              arms: [
                                (if_arm
                                  cond: 
                                    (condition.Shell
                                      commands: [
                                        (command.Sentence
                                          child: 
                                            (C {<Id.Lit_LBracket '['>} 
                                              {(DQ ($ Id.VSub_DollarName '$SSH_CONNECTION'))} {<Id.KW_Bang '!'> <Id.Lit_Equals '='>} {(DQ <'UNKNOWN 65535 UNKNOWN 65535'>)} {<Id.Lit_RBracket ']'>}
                                            )
                                          terminator: <Id.Op_Semi _>
                                        )
                                      ]
                                    )
                                  action: [
                                    (C {<fail>} 
                                      {
                                        (DQ <'bad SSH_CONNECTION protocol '> 
                                          ($ Id.VSub_DollarName '$p') <' privsep='> ($ Id.VSub_DollarName '$ps') <' comp='> ($ Id.VSub_DollarName '$c') <': '>
                                        )
                                      } {(DQ ($ Id.VSub_DollarName '$SSH_CONNECTION'))}
                                    )
                                  ]
                                  spids: [161 179]
                                )
                              ]
                            )
                          ]
                        )
                    )
                  ]
                )
            )
          ]
        )
    )
    (command.ForEach
      iter_name: p
      iter_words: [{(${ Id.VSub_Name SSH_PROTOCOLS)}]
      do_arg_iter: F
      body: 
        (command.DoGroup
          children: [
            (C {<verbose>} {(DQ <'username with style protocol '> ($ Id.VSub_DollarName '$p'))})
            (command.AndOr
              ops: [Id.Op_DPipe]
              children: [
                (C {(${ Id.VSub_Name SSH)} {<-> ($ Id.VSub_DollarName '$p')} {<-F>} 
                  {($ Id.VSub_DollarName '$OBJ') <'/ssh_proxy'>} {(${ Id.VSub_Name USER) <Id.Lit_Colon ':'> <style> <Id.Lit_At '@'> <999.999.999.999>} {<true>}
                )
                (C {<fail>} 
                  {(DQ <'ssh proxyconnect protocol '> ($ Id.VSub_DollarName '$p') <' failed'>)}
                )
              ]
            )
          ]
        )
    )
  ]
)