Function isHelpCommand

src/utils/bash/commands.ts:388–436

(command: string)

 * @returns true if it's a help command, false otherwise
 */
export function isHelpCommand(command: string): boolean {
  const trimmed = command.trim()

  // Check if command ends with --help
  if (!trimmed.endsWith('--help')) {
    return false
  }

  // Reject commands with quotes, as they might be trying to bypass restrictions
  if (trimmed.includes('"') || trimmed.includes("'")) {
    return false
  }

  // Parse the command to check for other flags
  const parseResult = tryParseShellCommand(trimmed)
  if (!parseResult.success) {
    return false
  }

  const tokens = parseResult.tokens
  let foundHelp = false

  // Only allow alphanumeric tokens (besides --help)
  const alphanumericPattern = /^[a-zA-Z0-9]+$/

  for (const token of tokens) {
    if (typeof token === 'string') {
      // Check if this token is a flag (starts with -)
      if (token.startsWith('-')) {
        // Only allow --help
        if (token === '--help') {
          foundHelp = true
        } else {
          // Found another flag, not a simple help command
          return false
        }
      } else {
        // Non-flag token - must be alphanumeric only
        // Reject paths, special characters, etc.
        if (!alphanumericPattern.test(token)) {
          return false
        }
      }
    }
  }

  // If we found a help flag and no other flags, it's a help command
  return foundHelp
}

const BASH_POLICY_SPEC = `<policy_spec>
# Claude Code Code Bash command prefix detection