feat: evolve rate-filter to a more generic filter

internal/automation/groups.go

@@ -5,12 +5,29 @@ import "fmt"
 // buildProxyGroups implements the "proxy-groups" ssm feature: for each rule,
 // filter the merged proxy pool by rule.Match and append a new proxy-group
 // containing the matched proxies' display names.
-func buildProxyGroups(finalConfig map[string]interface{}, rules []ProxyGroupRule, proxies []ProxyRef) {
-	for _, rule := range rules {
-		matched := matchProxies(proxies, rule.Match)
+// Returns one error per rule with an invalid match.name-pattern; other rules
+// still run.
+func buildProxyGroups(finalConfig map[string]interface{}, rules []ProxyGroupRule, proxies []ProxyRef) []error {
+	var errs []error
 
+	for _, rule := range rules {
+		matched, err := matchProxies(proxies, rule.Match)
+		if err != nil {
+			errs = append(errs, fmt.Errorf("proxy-group '%s': %w", rule.Name, err))
+			continue
+		}
+
+		// Multiple ProxyRefs (e.g. each subscription's own default
+		// selector) can share a DisplayName (e.g. once folded into a
+		// combined "Proxy Selection" group) — dedupe so it's not listed
+		// more than once.
+		seen := make(map[string]bool, len(matched))
 		names := make([]interface{}, 0, len(matched))
 		for _, p := range matched {
+			if seen[p.DisplayName] {
+				continue
+			}
+			seen[p.DisplayName] = true
 			names = append(names, p.DisplayName)
 		}
 		if len(matched) == 0 {
@@ -27,6 +44,8 @@ func buildProxyGroups(finalConfig map[string]interface{}, rules []ProxyGroupRule
 		}
 		appendProxyGroup(finalConfig, group)
 	}
+
+	return errs
 }
 
 func defaultString(v, fallback string) string {