fix: reject shell strings in trans argv

scripts/src/help.ts

@@ -191,6 +191,7 @@ export function sshHelp(): unknown {
     notes: [
       "trans --help and trans <route> --help print this JSON help and never open an interactive session; the underlying ssh subcommand keeps the same help behavior.",
       "For non-interactive remote commands, prefer argv for a single process and script/stdin for shell logic.",
+      "`argv` executes direct argv tokens only: `trans <route> argv ls -la` is valid, but `trans <route> argv 'ls -la'` is rejected because the single string would be treated as an executable path; use `script -- 'ls -la'` for one-line shell logic.",
       "For one-line remote shell logic without a heredoc, use `script -- '<command && command>'`; outer shell operators written outside trans, such as `trans G14:/repo sed ... && sed ...`, are parsed by the local shell before UniDesk starts and therefore cannot be redirected by the CLI. The explicit `shell '<command>'` operation remains available for the same sh -c path.",
       "When a one-line shell command is easier to type through the script path, `script -- '<command && command>'` runs that single string through the remote shell without waiting for stdin. When `script --` is followed by multiple tokens, it stays a direct argv form for commands such as `trans D601:/work script -- sed -n '1,20p' file`.",
       "script and shell helper modes inject a tiny POSIX-compatible printf wrapper before user shell text, so portable printf headings such as `printf \"--- section ---\\n\"` work consistently under dash/sh and bash. Direct argv commands are unchanged.",

scripts/src/ssh.ts

@@ -870,6 +870,7 @@ export function parseSshArgs(args: string[]): ParsedSshArgs {
   if (subcommand === "argv" || subcommand === "exec") {
     const toolArgs = args.slice(1);
     if (toolArgs.length === 0) throw new Error(`ssh ${subcommand} requires a command`);
+    validateDirectArgvCommand(subcommand, toolArgs);
     return { remoteCommand: shellArgv(toolArgs), requiresStdin: false, invocationKind: "argv" };
   }
   if (subcommand === "find") {
@@ -910,6 +911,20 @@ export function parseSshArgs(args: string[]): ParsedSshArgs {
   };
 }
 
+function validateDirectArgvCommand(commandName: string, toolArgs: string[]): void {
+  if (toolArgs.length !== 1) return;
+  const command = toolArgs[0] ?? "";
+  if (!looksLikeShellCommandString(command)) return;
+  throw new Error(
+    `ssh ${commandName} received one shell-like command string; ${commandName} executes a single process and treats that string as the executable path. ` +
+    `Use \`trans <route> script -- ${shellQuote(command)}\` for one-line shell logic, or split argv tokens, for example \`trans <route> ${commandName} ls -la\`.`
+  );
+}
+
+function looksLikeShellCommandString(value: string): boolean {
+  return /\s/u.test(value) || /&&|\|\||[;|<>]/u.test(value);
+}
+
 export function parseSshInvocation(target: string, args: string[]): ParsedSshInvocation {
   const route = parseSshRoute(target);
   if (route.plane === "k3s") {
@@ -1401,7 +1416,10 @@ function parseK3sTargetOperation(route: ParsedSshRoute, args: string[]): ParsedS
     return { remoteCommand: buildK3sExecCommand([...targetArgs, "--", parsed.shell, "-c", shellScriptWithCompatibility(parsed.command)]), requiresStdin: false, invocationKind: "helper" };
   }
   if (operation === "logs") return { remoteCommand: buildK3sLogsCommand([...targetArgs, ...operationArgs]), requiresStdin: false, invocationKind: "helper" };
-  if (operation === "argv") return { remoteCommand: buildK3sExecCommand([...targetArgs, ...k3sRouteCommandArgs(operationArgs)]), requiresStdin: false, invocationKind: "argv" };
+  if (operation === "argv") {
+    validateDirectArgvCommand(operation, operationArgs);
+    return { remoteCommand: buildK3sExecCommand([...targetArgs, ...k3sRouteCommandArgs(operationArgs)]), requiresStdin: false, invocationKind: "argv" };
+  }
   if (operation === "get" || operation === "describe") {
     return { remoteCommand: buildK3sTargetObjectCommand(operation, route, operationArgs), requiresStdin: false, invocationKind: "helper" };
   }