Function detectCatFileRead

src/node/services/tools/bash.ts:73–159

(script: string)

}

function detectCatFileRead(script: string): boolean {
  // Fast-path: avoid doing any work if "cat" doesn't appear at all.
  if (!script.includes("cat")) {
    return false;
  }

  // Split on common statement separators and pipelines.
  // Note: this is intentionally not a full shell parser; we aim to catch the common
  // "cat <path>" pattern without false positives like "echo foo | cat".
  const segments = script.split(/\n|&&|\|\||;|\|/);

  for (const segment of segments) {
    const tokens = segment.trim().split(/\s+/).filter(Boolean);
    const catIndex = getCatCommandTokenIndex(tokens);
    if (catIndex === null) continue;

    const args = tokens.slice(catIndex + 1);
    if (args.length === 0) continue; // "cat" (stdin passthrough)

    // Ignore heredocs / here-strings (not a file read).
    if (args.some((t) => t.startsWith("<<") || t.startsWith("<<<"))) {
      continue;
    }

    let expectInputFile = false;
    let skipNextOutputTarget = false;

    for (const token of args) {
      if (expectInputFile) {
        expectInputFile = false;
        if (token !== "-" && token.length > 0) {
          return true;
        }
        continue;
      }

      if (skipNextOutputTarget) {
        skipNextOutputTarget = false;
        continue;
      }

      // Input redirection: cat < file OR cat <file
      if (token === "<" || token === "0<") {
        expectInputFile = true;
        continue;
      }
      const inputMatch = /^(?:0)?<(.+)$/.exec(token);
      if (inputMatch && !token.startsWith("<<") && !token.startsWith("<<<")) {
        const inputFile = inputMatch[1];
        if (inputFile !== "-" && inputFile.length > 0) {
          return true;
        }
        continue;
      }

      // Output redirection: ignore output targets (doesn't indicate reading a file).
      if (
        token === ">" ||