wave-agent-sdk 0.11.5 → 0.11.6

package/dist/managers/mcpManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcpManager.d.ts","sourceRoot":"","sources":["../../src/managers/mcpManager.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAEjE,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,KAAK,EACV,MAAM,EACN,eAAe,EACf,SAAS,EACT,OAAO,EACP,eAAe,EAChB,MAAM,mBAAmB,CAAC;AAQ3B,MAAM,WAAW,mBAAmB;IAClC,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,IAAI,CAAC;CACxD;AAID,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,UAAU;IASnB,OAAO,CAAC,SAAS;IARnB,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,OAAO,CAA2C;IAC1D,OAAO,CAAC,WAAW,CAAyC;IAC5D,OAAO,CAAC,UAAU,CAAc;IAChC,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,SAAS,CAAsB;gBAG7B,SAAS,EAAE,SAAS,EAC5B,OAAO,GAAE,iBAAsB;IAKjC;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,MAAM,EACf,WAAW,GAAE,OAAe,GAC3B,OAAO,CAAC,IAAI,CAAC;IAwCV,kBAAkB,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAO/C,UAAU,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IA0CvC,UAAU,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAWrD,SAAS,IAAI,SAAS,GAAG,IAAI;IAI7B,aAAa,IAAI,eAAe,EAAE;IAIlC,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAIpD,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI;IASzE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,OAAO;IAyBzD,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAgB7B,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA+F7C,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA2BtD,oBAAoB,IAAI,OAAO,EAAE;IAW3B,cAAc,CAClB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACtD,CAAC;YAsDY,uBAAuB;IA8D/B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAS9B;;OAEG;IACH,iBAAiB,IAAI,UAAU,EAAE;IA6BjC;;OAEG;IACH,iBAAiB,IAAI,0BAA0B,EAAE;IAIjD;;OAEG;IACG,wBAAwB,CAC5B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,UAAU,CAAC;IActB;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;CAcjC"}
+{"version":3,"file":"mcpManager.d.ts","sourceRoot":"","sources":["../../src/managers/mcpManager.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAEjE,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,KAAK,EACV,MAAM,EACN,eAAe,EACf,SAAS,EACT,OAAO,EACP,eAAe,EAChB,MAAM,mBAAmB,CAAC;AAQ3B,MAAM,WAAW,mBAAmB;IAClC,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,IAAI,CAAC;CACxD;AAID,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,UAAU;IASnB,OAAO,CAAC,SAAS;IARnB,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,OAAO,CAA2C;IAC1D,OAAO,CAAC,WAAW,CAAyC;IAC5D,OAAO,CAAC,UAAU,CAAc;IAChC,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,SAAS,CAAsB;gBAG7B,SAAS,EAAE,SAAS,EAC5B,OAAO,GAAE,iBAAsB;IAKjC;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,MAAM,EACf,WAAW,GAAE,OAAe,GAC3B,OAAO,CAAC,IAAI,CAAC;IAuCV,kBAAkB,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAO/C,UAAU,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IA0CvC,UAAU,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAWrD,SAAS,IAAI,SAAS,GAAG,IAAI;IAI7B,aAAa,IAAI,eAAe,EAAE;IAIlC,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAIpD,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI;IASzE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,OAAO;IAyBzD,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAgB7B,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAqH7C,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA2BtD,oBAAoB,IAAI,OAAO,EAAE;IAW3B,cAAc,CAClB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACtD,CAAC;YAsDY,uBAAuB;IA8D/B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAS9B;;OAEG;IACH,iBAAiB,IAAI,UAAU,EAAE;IA6BjC;;OAEG;IACH,iBAAiB,IAAI,0BAA0B,EAAE;IAIjD;;OAEG;IACG,wBAAwB,CAC5B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,UAAU,CAAC;IActB;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;CAcjC"}

package/dist/managers/mcpManager.js

@@ -25,27 +25,25 @@ export class McpManager {
             // Ensure MCP configuration is loaded
             const config = await this.ensureConfigLoaded();
             if (config && config.mcpServers) {
-                // Connect to all configured servers
-                const connectionPromises = Object.keys(config.mcpServers).map(async (serverName) => {
-                    try {
-                        logger?.debug(`Connecting to MCP server: ${serverName}`);
-                        const success = await this.connectServer(serverName);
+                // Connect to all configured servers in background to avoid blocking agent initialization
+                Object.keys(config.mcpServers).forEach((serverName) => {
+                    logger?.debug(`Connecting to MCP server: ${serverName}`);
+                    this.connectServer(serverName)
+                        .then((success) => {
                         if (success) {
                             logger?.debug(`Successfully connected to MCP server: ${serverName}`);
                         }
                         else {
                             logger?.warn(`Failed to connect to MCP server: ${serverName}`);
                         }
-                    }
-                    catch {
-                        logger?.error(`Error connecting to MCP server ${serverName}`);
-                    }
+                    })
+                        .catch((error) => {
+                        logger?.error(`Background connection to MCP server ${serverName} failed:`, error);
+                    });
                 });
-                // Wait for all connection attempts to complete
-                await Promise.all(connectionPromises);
             }
-            logger?.debug("MCP servers initialization completed");
-            // Trigger state change callback after initialization
+            logger?.debug("MCP servers initialization started in background");
+            // Trigger state change callback after starting initialization
             this.callbacks.onServersChange?.(this.getAllServers());
         }
     }
@@ -173,7 +171,28 @@ export class McpManager {
                     ...(server.config.env || {}),
                 },
                 cwd: this.workdir, // Use the agent's workdir as the process working directory
+                stderr: "pipe", // Pipe stderr to capture it
             });
+            // Handle stderr output
+            const stderr = transport.stderr;
+            if (stderr) {
+                let buffer = "";
+                stderr.on("data", (chunk) => {
+                    buffer += chunk.toString();
+                    const lines = buffer.split("\n");
+                    buffer = lines.pop() || "";
+                    for (const line of lines) {
+                        if (line.trim()) {
+                            logger?.error(`[MCP Server ${name}] ${line}`);
+                        }
+                    }
+                });
+                stderr.on("end", () => {
+                    if (buffer.trim()) {
+                        logger?.error(`[MCP Server ${name}] ${buffer}`);
+                    }
+                });
+            }
             // Create client
             const client = new Client({
                 name: "wave-code",

package/dist/managers/permissionManager.js

@@ -8,7 +8,7 @@
 import path from "node:path";
 import { minimatch } from "minimatch";
 import { RESTRICTED_TOOLS } from "../types/permissions.js";
-import { splitBashCommand, stripEnvVars, stripRedirections, hasWriteRedirections, isBashWriteRedirect, getSmartPrefix, DANGEROUS_COMMANDS, } from "../utils/bashParser.js";
+import { splitBashCommand, stripEnvVars, stripRedirections, hasWriteRedirections, isBashHeredocWrite, getSmartPrefix, DANGEROUS_COMMANDS, } from "../utils/bashParser.js";
 import { isPathInside } from "../utils/pathSafety.js";
 import { BASH_TOOL_NAME, EDIT_TOOL_NAME, WRITE_TOOL_NAME, READ_TOOL_NAME, } from "../constants/tools.js";
 const SAFE_COMMANDS = [
@@ -266,10 +266,10 @@ export class PermissionManager {
      * Called by individual tools after validation/diff, before real operation
      */
     async checkPermission(context) {
-        // 0. Intercept Bash file writing operations
+        // 0. Intercept Bash EOF writing operations
         if (context.toolName === BASH_TOOL_NAME && context.toolInput?.command) {
             const command = String(context.toolInput.command);
-            if (isBashWriteRedirect(command)) {
+            if (isBashHeredocWrite(command)) {
                 // Check if this specific command is explicitly allowed by a rule that includes redirection
                 const isExplicitlyAllowed = [
                     ...this.instanceAllowedRules,
@@ -289,7 +289,7 @@ export class PermissionManager {
                 if (!isExplicitlyAllowed) {
                     return {
                         behavior: "deny",
-                        message: "Bash-based file writing operations (e.g., using '>', '>>', or 'cat <<EOF > file') are not allowed. Please use the dedicated 'Write' or 'Edit' tools instead for file modifications.",
+                        message: "Bash-based file writing operations using heredocs (e.g., 'cat <<EOF > file') are not allowed. Please use the dedicated 'Write' or 'Edit' tools instead for file modifications.",
                     };
                 }
             }

package/dist/utils/bashParser.d.ts

@@ -16,9 +16,13 @@ export declare function stripRedirections(command: string): string;
  */
 export declare function hasWriteRedirections(command: string): boolean;
 /**
- * Alias for hasWriteRedirections, used for semantic clarity in permission checks.
+ * Checks if a bash command contains any heredocs (<<, <<-).
  */
-export declare function isBashWriteRedirect(command: string): boolean;
+export declare function hasHeredoc(command: string): boolean;
+/**
+ * Checks if a bash command is a heredoc write operation (e.g., cat <<EOF > file).
+ */
+export declare function isBashHeredocWrite(command: string): boolean;
 /**
  * Blacklist of dangerous commands that should not be safely prefix-matched
  * and should not have persistent permissions.

package/dist/utils/bashParser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bashParser.d.ts","sourceRoot":"","sources":["../../src/utils/bashParser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAmH1D;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA2CpD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAuHzD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAkG7D;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,UAa9B,CAAC;AAEF;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA8L7D"}
+{"version":3,"file":"bashParser.d.ts","sourceRoot":"","sources":["../../src/utils/bashParser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAoH1D;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA2CpD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAuHzD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAkG7D;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAsCnD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,UAa9B,CAAC;AAEF;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA8L7D"}

package/dist/utils/bashParser.js

@@ -53,7 +53,7 @@ export function splitBashCommand(command) {
             opLen = 1;
         else if (char === "|")
             opLen = 1;
-        else if (char === "&" && nextChar !== ">")
+        else if (char === "&" && nextChar !== ">" && command[i - 1] !== ">")
             opLen = 1;
         if (opLen > 0) {
             // Check if preceded by an odd number of backslashes
@@ -361,10 +361,44 @@ export function hasWriteRedirections(command) {
     return false;
 }
 /**
- * Alias for hasWriteRedirections, used for semantic clarity in permission checks.
+ * Checks if a bash command contains any heredocs (<<, <<-).
  */
-export function isBashWriteRedirect(command) {
-    return hasWriteRedirections(command);
+export function hasHeredoc(command) {
+    let inSingleQuote = false;
+    let inDoubleQuote = false;
+    let escaped = false;
+    for (let i = 0; i < command.length; i++) {
+        const char = command[i];
+        if (escaped) {
+            escaped = false;
+            continue;
+        }
+        if (char === "\\") {
+            escaped = true;
+            continue;
+        }
+        if (char === "'" && !inDoubleQuote) {
+            inSingleQuote = !inSingleQuote;
+            continue;
+        }
+        if (char === '"' && !inSingleQuote) {
+            inDoubleQuote = !inDoubleQuote;
+            continue;
+        }
+        if (inSingleQuote || inDoubleQuote) {
+            continue;
+        }
+        if (char === "<" && command[i + 1] === "<") {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Checks if a bash command is a heredoc write operation (e.g., cat <<EOF > file).
+ */
+export function isBashHeredocWrite(command) {
+    return hasHeredoc(command) && hasWriteRedirections(command);
 }
 /**
  * Blacklist of dangerous commands that should not be safely prefix-matched

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wave-agent-sdk",
-  "version": "0.11.5",
+  "version": "0.11.6",
   "description": "SDK for building AI-powered development tools and agents",
   "keywords": [
     "ai",

package/src/managers/mcpManager.ts

@@ -63,12 +63,11 @@ export class McpManager {
       const config = await this.ensureConfigLoaded();
 
       if (config && config.mcpServers) {
-        // Connect to all configured servers
-        const connectionPromises = Object.keys(config.mcpServers).map(
-          async (serverName) => {
-            try {
-              logger?.debug(`Connecting to MCP server: ${serverName}`);
-              const success = await this.connectServer(serverName);
+        // Connect to all configured servers in background to avoid blocking agent initialization
+        Object.keys(config.mcpServers).forEach((serverName) => {
+          logger?.debug(`Connecting to MCP server: ${serverName}`);
+          this.connectServer(serverName)
+            .then((success) => {
               if (success) {
                 logger?.debug(
                   `Successfully connected to MCP server: ${serverName}`,
@@ -76,18 +75,18 @@ export class McpManager {
               } else {
                 logger?.warn(`Failed to connect to MCP server: ${serverName}`);
               }
-            } catch {
-              logger?.error(`Error connecting to MCP server ${serverName}`);
-            }
-          },
-        );
-
-        // Wait for all connection attempts to complete
-        await Promise.all(connectionPromises);
+            })
+            .catch((error) => {
+              logger?.error(
+                `Background connection to MCP server ${serverName} failed:`,
+                error,
+              );
+            });
+        });
       }
 
-      logger?.debug("MCP servers initialization completed");
-      // Trigger state change callback after initialization
+      logger?.debug("MCP servers initialization started in background");
+      // Trigger state change callback after starting initialization
       this.callbacks.onServersChange?.(this.getAllServers());
     }
   }
@@ -233,8 +232,30 @@ export class McpManager {
           ...(server.config.env || {}),
         },
         cwd: this.workdir, // Use the agent's workdir as the process working directory
+        stderr: "pipe", // Pipe stderr to capture it
       });
 
+      // Handle stderr output
+      const stderr = transport.stderr;
+      if (stderr) {
+        let buffer = "";
+        stderr.on("data", (chunk: Buffer) => {
+          buffer += chunk.toString();
+          const lines = buffer.split("\n");
+          buffer = lines.pop() || "";
+          for (const line of lines) {
+            if (line.trim()) {
+              logger?.error(`[MCP Server ${name}] ${line}`);
+            }
+          }
+        });
+        stderr.on("end", () => {
+          if (buffer.trim()) {
+            logger?.error(`[MCP Server ${name}] ${buffer}`);
+          }
+        });
+      }
+
       // Create client
       const client = new Client(
         {

package/src/managers/permissionManager.ts

@@ -21,7 +21,7 @@ import {
   stripEnvVars,
   stripRedirections,
   hasWriteRedirections,
-  isBashWriteRedirect,
+  isBashHeredocWrite,
   getSmartPrefix,
   DANGEROUS_COMMANDS,
 } from "../utils/bashParser.js";
@@ -370,10 +370,10 @@ export class PermissionManager {
   async checkPermission(
     context: ToolPermissionContext,
   ): Promise<PermissionDecision> {
-    // 0. Intercept Bash file writing operations
+    // 0. Intercept Bash EOF writing operations
     if (context.toolName === BASH_TOOL_NAME && context.toolInput?.command) {
       const command = String(context.toolInput.command);
-      if (isBashWriteRedirect(command)) {
+      if (isBashHeredocWrite(command)) {
         // Check if this specific command is explicitly allowed by a rule that includes redirection
         const isExplicitlyAllowed = [
           ...this.instanceAllowedRules,
@@ -395,7 +395,7 @@ export class PermissionManager {
           return {
             behavior: "deny",
             message:
-              "Bash-based file writing operations (e.g., using '>', '>>', or 'cat <<EOF > file') are not allowed. Please use the dedicated 'Write' or 'Edit' tools instead for file modifications.",
+              "Bash-based file writing operations using heredocs (e.g., 'cat <<EOF > file') are not allowed. Please use the dedicated 'Write' or 'Edit' tools instead for file modifications.",
           };
         }
       }

package/src/utils/bashParser.ts

@@ -58,7 +58,8 @@ export function splitBashCommand(command: string): string[] {
     else if (char === "|" && nextChar === "&") opLen = 2;
     else if (char === ";") opLen = 1;
     else if (char === "|") opLen = 1;
-    else if (char === "&" && nextChar !== ">") opLen = 1;
+    else if (char === "&" && nextChar !== ">" && command[i - 1] !== ">")
+      opLen = 1;
 
     if (opLen > 0) {
       // Check if preceded by an odd number of backslashes
@@ -395,10 +396,53 @@ export function hasWriteRedirections(command: string): boolean {
 }
 
 /**
- * Alias for hasWriteRedirections, used for semantic clarity in permission checks.
+ * Checks if a bash command contains any heredocs (<<, <<-).
  */
-export function isBashWriteRedirect(command: string): boolean {
-  return hasWriteRedirections(command);
+export function hasHeredoc(command: string): boolean {
+  let inSingleQuote = false;
+  let inDoubleQuote = false;
+  let escaped = false;
+
+  for (let i = 0; i < command.length; i++) {
+    const char = command[i];
+
+    if (escaped) {
+      escaped = false;
+      continue;
+    }
+
+    if (char === "\\") {
+      escaped = true;
+      continue;
+    }
+
+    if (char === "'" && !inDoubleQuote) {
+      inSingleQuote = !inSingleQuote;
+      continue;
+    }
+
+    if (char === '"' && !inSingleQuote) {
+      inDoubleQuote = !inDoubleQuote;
+      continue;
+    }
+
+    if (inSingleQuote || inDoubleQuote) {
+      continue;
+    }
+
+    if (char === "<" && command[i + 1] === "<") {
+      return true;
+    }
+  }
+
+  return false;
+}
+
+/**
+ * Checks if a bash command is a heredoc write operation (e.g., cat <<EOF > file).
+ */
+export function isBashHeredocWrite(command: string): boolean {
+  return hasHeredoc(command) && hasWriteRedirections(command);
 }
 
 /**