The dangerous-removal checker that guards rm and rmdir commands has been significantly reworked with several new detection patterns:
- Detects when a
cdprecedes a relative glob removal, making the target statically unresolvable - Detects when the removal target (after glob expansion) cannot be resolved to a directory
- Detects when a glob pattern traverses multiple directories that cannot be statically enumerated (more than one wildcard level deep)
- Now checks against all configured working directories, not just the primary CWD — additional working directories and their parents are also protected
- The old check ("remove CWD or its parent") has been replaced by the more precise "workspace directory" check
Evidence
Removal safety expansion (search for "This command changes directories before the removal" and "This command's glob pattern traverses directories")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.