Function handleFileDescriptorRedirection

src/utils/bash/commands.ts:1093–1140

(
  fd: string,
  operator: '>' | '>>',
  target: ParseEntry | undefined,
  redirections: Array<{ target: string; operator: '>' | '>>' }>,
  kept: ParseEntry[],
  skipCount = 1,
)

}

function handleFileDescriptorRedirection(
  fd: string,
  operator: '>' | '>>',
  target: ParseEntry | undefined,
  redirections: Array<{ target: string; operator: '>' | '>>' }>,
  kept: ParseEntry[],
  skipCount = 1,
): { skip: number; dangerous: boolean } {
  const isStdout = fd === '1'
  const isFileTarget =
    target &&
    isSimpleTarget(target) &&
    typeof target === 'string' &&
    !/^\d+$/.test(target)
  const isFdTarget = typeof target === 'string' && /^\d+$/.test(target.trim())

  // Always remove the fd number from kept
  if (kept.length > 0) kept.pop()

  // SECURITY: Check for dangerous expansion FIRST before any early returns
  // This catches cases like 2>$HOME/file or 2>%TEMP%/file
  if (!isFdTarget && hasDangerousExpansion(target)) {
    return { skip: 0, dangerous: true }
  }

  // Handle file redirection (simple targets like 2>/tmp/file)
  if (isFileTarget) {
    redirections.push({ target: target as string, operator })

    // Non-stdout: preserve the redirection in the command
    if (!isStdout) {
      kept.push(fd + operator, target as string)
    }
    return { skip: skipCount, dangerous: false }
  }

  // Handle fd-to-fd redirection (e.g., 2>&1)
  // Only preserve for non-stdout
  if (!isStdout) {
    kept.push(fd + operator)
    if (target) {
      kept.push(target)
      return { skip: 1, dangerous: false }
    }
  }

  return { skip: 0, dangerous: false }
}

// Helper: Check if '(' is part of command substitution
function detectCommandSubstitution(