Function hasDangerousExpansion

src/utils/bash/commands.ts:830–858

* Checks if a redirection target contains shell expansion syntax that could * bypass path validation. These require manual approval for security. * * Design invariant: for every string redirect target, EITHER isSimpleTarget * is TRUE (→ captured → path-validated) OR hasDangerousExpansion is TRUE

(target: ParseEntry | undefined)

 * rejects (except the empty string which is handled separately).
 */
function hasDangerousExpansion(target: ParseEntry | undefined): boolean {
  // shell-quote parses unquoted globs as {op:'glob', pattern:'...'} objects,
  // not strings. `> *.sh` as a redirect target expands at runtime (single match
  // → overwrite, multiple → ambiguous-redirect error). Flag these as dangerous.
  if (typeof target === 'object' && target !== null && 'op' in target) {
    if (target.op === 'glob') return true
    return false
  }
  if (typeof target !== 'string') return false
  if (target.length === 0) return false
  return (
    target.includes('$') ||
    target.includes('%') ||
    target.includes('`') || // Backtick substitution (was only in isSimpleTarget)
    target.includes('*') || // Glob (was only in isSimpleTarget)
    target.includes('?') || // Glob (was only in isSimpleTarget)
    target.includes('[') || // Glob class (was only in isSimpleTarget)
    target.includes('{') || // Brace expansion (was only in isSimpleTarget)
    target.startsWith('!') || // History expansion (was only in isSimpleTarget)
    target.startsWith('=') || // Zsh equals expansion (=cmd -> /path/to/cmd)
    // ALL tilde-prefixed targets. Previously `~` and `~/path` were carved out
    // with a comment claiming "handled by expandTilde" — but expandTilde only
    // runs via validateOutputRedirections(redirections), and for `~/path` the
    // redirections array is EMPTY (isSimpleTarget rejected it, so it was never
    // pushed). The carve-out created a gap where `> ~/.bashrc` was neither
    // captured nor flagged. See bug_007 / bug_022.
    target.startsWith('~')
  )
}

function handleRedirection(
  part: ParseEntry,