@ordewell/core 0.6.3 → 0.6.4

package/dist/index.mjs

@@ -2345,7 +2345,10 @@ var WRAPPER_FAMILY = {
   // The multi-call binary ships its own `rm`, `mv` and `sh`, so the refused
   // name arrives as its first argument.
   busybox: { booleanFlags: ["--list", "--install", ...HELP_FLAGS] },
-  command: { booleanFlags: ["-p"], noExecFlags: ["-v", "-V"] }
+  command: { booleanFlags: ["-p"], noExecFlags: ["-v", "-V"] },
+  // Runs the named shell builtin, so `builtin eval …` is an `eval`. Classified
+  // on its own name it only asked, and a grant for `builtin echo` covered it.
+  builtin: {}
 };
 var XARGS_SPEC = {
   valueFlags: [
@@ -3075,6 +3078,9 @@ function refusalFor(seg) {
   if (seg.binary === "source" || seg.binary === ".") {
     return `"${seg.binary}" runs a file's contents as commands, which this classifier cannot inspect. Use the read-only research tools, or describe it as a task.`;
   }
+  if (seg.binary === "enable" && seg.args.some((a) => /^-[a-zA-Z]*f/.test(a))) {
+    return `"enable -f" loads a shared library into the shell, which runs its code. Use the read-only research tools, or describe it as a task.`;
+  }
   if (SHELL_KEYWORDS.includes(seg.binary)) {
     return `"${seg.binary}" is a shell keyword or compound-command opener. This classifier only inspects the command that runs first, and a keyword hides the real one from it. Run the inner command directly, or describe it as a task.`;
   }
@@ -3185,6 +3191,9 @@ function classifyCommand(command, opts = {}) {
   }
   const nonAuto = unwrapped.filter((u) => u.runner !== void 0 || !isAuto(u.seg, opts));
   if (nonAuto.length === 0) return { tier: "auto", scope: "" };
+  if (nonAuto.some((u) => u.seg.binary === "cd" || u.seg.binary !== "command" && SHELL_STATE_COMMANDS.has(u.seg.binary))) {
+    return { tier: "ask", scope: trimmed };
+  }
   const scope = [...new Set(nonAuto.map((u) => u.runner ? `${u.runner} ${scopeFor(u.seg)}` : scopeFor(u.seg)))].sort().join(" + ");
   return { tier: "ask", scope };
 }