v1.0.1

1.0.1

Plugin-based command knowledge base.

Added

• Plugin architecture for command knowledge: knowledge is now contributed by
  CommandKnowledgePlugins, one per domain. Twelve built-in plugins ship by
  default (filesystem, archive, shell, environment, process, system,
  network, container, packageManager, dartFlutter, git, windows),
  composed via defaultKnowledgePlugins. Register your own with
  CommandKnowledgeBase(plugins: [...]) or replace the built-ins entirely with
  includeDefaults: false.
• Declarative CommandKnowledge entries with rich fields: category,
  platforms, description, baseCapabilities, baseRisk, subcommands,
  argumentRules, wrapper and an optional refine function hook. Argument
  rules use composable ArgumentMatches (ExactFlag, PrefixFlag,
  TokenPresent, ArgRegex, ArgPredicate).
• CommandKnowledgeBase.analyze() returning a CommandKnowledgeResult
  (capabilities, an aggregated SecurityLevel risk hint, the matched entry and
  explanatory notes), plus knowledgeFor() and allKnowledge.
• CommandAnalysis.knowledgeRisk: the highest knowledge-base risk hint across a
  command's invocations (advisory metadata).
• Opt-in KnowledgeRiskDetector that surfaces elevated knowledge-base risk
  (e.g. a force push) as knowledge-risk security findings. Not part of
  SecurityAnalyzer.defaultDetectors, so default verdicts are unchanged.
• Broader command coverage: Dart/Flutter sub-commands, archive/compression
  tools, cloud CLIs (gh, aws, gcloud, az, kubectl), more git
  sub-commands, additional package managers and Windows-specific tools.

Changed (breaking)

• CommandKnowledgeBase is now composed from plugins. The
  extraExecutableCapabilities constructor parameter and the static
  wrapperCommands set have been removed; supply a CommandKnowledgePlugin
  (e.g. ListKnowledgePlugin) and per-entry WrapperSpecs instead.
• Sub-command matching now uses the first non-flag argument rather than the
  first argument, so leading global flags (e.g. git --no-pager push) no longer
  hide the sub-command.

1.0.0

Initial release.

• Multi-syntax parsing: generic, posixShell, bash, windowsCmd,
  powershell, producing a typed, immutable CommandNode AST. Parsers never
  throw and report ParseDiagnostics for malformed input.
• Extensible executable normalization (directory/extension stripping, version
  suffix collapsing, aliases).
• Capability detection via a data-driven, extensible CommandKnowledgeBase,
  including wrapper-command look-through (e.g. sudo, env, xargs).
• Effect classification into human-readable CommandEffects.
• Security analysis with eight detectors: dangerous operators, command
  substitution, inline shell execution (incl. -EncodedCommand), privilege
  escalation, destructive commands (rm -rf / ⇒ critical), remote
  download-and-execute (curl … | bash ⇒ critical), path traversal, and
  environment expansion.
• Composable policy engine (CommandPolicy / PolicySet) with nine built-in
  policies and ALLOW / REVIEW / DENY decisions.
• CommandShield facade exposing parse, analyze, and validate.
• Comprehensive unit, integration, and regression test suites; CI with
  formatting, analysis, tests, and ≥90% coverage enforcement.