fix: detect $VAR shell expansion, handle already-exited child, broaden env redaction

- Add $ and lowercase letters to SHELL_FEATURES_RE so scripts with
  variable references or mixed-case env assignments route through sh -c
- Wrap gracefulKill's initial SIGTERM in try/catch so an already-exited
  child doesn't skip shutdownServer
- Broaden telemetry redaction regex to match mixed-case env var names

Author: MathurAditya724

src/commands/local/run.ts

@@ -288,7 +288,11 @@ const KILL_GRACE_MS = 5000;
 async function gracefulKill(
   child: ReturnType<typeof Bun.spawn>
 ): Promise<void> {
-  child.kill("SIGTERM");
+  try {
+    child.kill("SIGTERM");
+  } catch {
+    return;
+  }
   let graceTimer: ReturnType<typeof setTimeout> | undefined;
   const exited = await Promise.race([
     child.exited.then(() => true),

src/lib/dev-script.ts

@@ -18,10 +18,10 @@ const WHITESPACE_RE = /\s+/;
 
 /**
  * Matches script values that use shell features (env-var assignments,
- * operators, redirects) which cannot be tokenized by simple whitespace
- * splitting and must be run via `sh -c`.
+ * variable expansion, operators, redirects) which cannot be tokenized
+ * by simple whitespace splitting and must be run via `sh -c`.
  */
-const SHELL_FEATURES_RE = /^[A-Z_]+=\S|&&|\|\||[|><;]/;
+const SHELL_FEATURES_RE = /^[A-Za-z_]+=\S|&&|\|\||[|><;$]/;
 
 /**
  * Detect the project's dev command by inspecting filesystem markers in priority order.

src/lib/init/verify-setup.ts

@@ -153,7 +153,7 @@ export async function verifySetup(
     features: result.result?.features,
     detectedCommand: detected.args
       .join(" ")
-      .replace(/[A-Z_]+=\S+/g, (m) => `${m.split("=")[0]}=[REDACTED]`),
+      .replace(/[A-Za-z_]\w*=\S+/g, (m) => `${m.split("=")[0]}=[REDACTED]`),
     detectedSource: detected.source,
   };