Function buildCommand

src/security/sanitize.js:196–201

* Build a shell command from a base + already-trusted prefix and an array * of user-supplied args. Each arg is escaped via escapeShellArg. * * Example: buildCommand('rg', ['--files', '--glob'], userPattern)

(base, trusted, ...userArgs)

 * Example: buildCommand('rg', ['--files', '--glob'], userPattern)
 */
function buildCommand(base, trusted, ...userArgs) {
  const parts = [base];
  for (const t of trusted) parts.push(String(t));
  for (const u of userArgs) parts.push(escapeShellArg(u));
  return parts.join(' ');
}

// ─── ANSI / control-char stripping ──────────────────────────────────────────