src/main/core/ssh/—ssh-connection-manager.ts,ssh-credential-service.ts,ssh-client-proxy.ts,sshConfigParser.ts,build-connect-config.ts,controller.tssrc/main/core/fs/impl/ssh-fs.tssrc/main/core/pty/ssh2-pty.tssrc/main/core/terminals/impl/ssh-terminal-provider.tssrc/main/utils/shellEscape.ts
- treat remote shell construction as security-sensitive
- use shared escaping and validation helpers
- do not bypass path-safety or shell validation helpers
- verify how a change affects both connection setup and command execution