Expand description
tool_output classification of shell commands (pz21 §1.8, Q6 a).
A command whose output comes from outside the repository (an issue
tracker CLI, a network fetch, a package registry query, a foreign ref)
delivers untrusted text. The table below names those commands by head;
wrapped and compound forms are unwrapped first (sh -c, env,
timeout, nice, sudo, xargs, and the parts of ;, &&, || and
|). Any matching part makes the whole output tool_output. A command
that cannot be parsed (unbalanced quotes, eval) fails closed: it is
tool_output too. The project’s own build and test commands never match.
The reference is cmd:<blake3(command)[..8]>: deterministic and
content-free. A download (curl -o x, wget -O x, a matching command
redirected into a file) also names the written path, so a later read of
exactly that file in the same session is fenced (file:<path>).
Structs§
- Tool
Output Match - What the table found for one command.
Functions§
- classify
- Classify
command.None: the output is the project’s own. - command_
ref - The content-free reference of a command.