Canonicalize PowerShell read-only aliases

Author: SqlRush

docs/claude-code-go-rewrite-plan.md

@@ -282,6 +282,7 @@ test/parity/                 # golden tests against TS/official behavior
 - 本轮补充：slash command 现在有基础 local command result 抽象，`/clear` 不再落入 unsupported 分支，会生成 local text result、保留 command metadata message，并且不会请求模型；完整 REPL conversation reset、local command text/compact/skip 全语义、`/cost`/`/status`/`/compact` 和 local-jsx UI 执行仍未宣称完成。
 - 本轮补充：Bash destructive 分类会递归检查未 single-quoted 的 `$()`、backtick 和 subshell `(...)` 内容，嵌套破坏性命令会触发 destructive 标记。
 - 本轮补充：PowerShell destructive 分类会递归检查未 single-quoted 的括号表达式、`$()` 子表达式和 scriptblock `{...}`，嵌套 `Remove-Item`/mutating cmdlet 不再只停留在 not-read-only 状态。
+- 本轮补充：PowerShell read-only 分类补齐常见 pipeline alias canonicalization，包括 `select`/`sort`/`group`/`where`/`?`、`ft`/`fl`/`fw`/`fc` 和 `measure`，复用现有参数表达式 guard。
 - 本轮补充：Bash 文件读取/搜索类 read-only 命令增加基础相对路径 guard，绝对路径、home、父目录、变量路径、Windows drive、UNC 和 URI/provider-like 路径不再自动允许。
 - 本轮补充：Bash read-only 分类新增 `sed` 保守只读子集，允许 `-n`/`--quiet`、`-e`/`--expression` 的纯打印/删除/退出/行号脚本读取安全相对路径，同时拒绝 `-i`、`-f`、写文件/执行命令脚本和越界路径。
 - 本轮补充：Bash read-only 分类新增 `awk`/`gawk`/`mawk`/`nawk` 极小安全子集，允许 `{print}` 和 `{print $1, $2}` 这类纯输出脚本读取安全相对路径，并拒绝脚本文件、重定向、`system`/复杂表达式和越界路径。

docs/first-second-parity-audit.md

@@ -133,6 +133,7 @@ Covered behavior:
 - `Grep` now accepts whole-word matching through `word_regexp`/`wordRegexp`/`word-regexp`/`-w`, applying word-boundary filtering for both regex and fixed-string patterns and preserving quoted boolean coercion.
 - `Grep` now accepts ripgrep-style pattern files through `pattern_file`/`--file`/`-f`, reading one pattern per line, combining file patterns with explicit patterns, preserving empty-line matching semantics, and applying fixed-string, smart-case, word-regexp, and line-regexp handling to the combined set.
 - `Grep` now accepts inverted matching through `invert_match`/`invertMatch`/`invert-match`/`-v`, applying the inverted line set consistently for files-with-matches, content, count, and multiline span output modes while preserving quoted boolean coercion.
+- `PowerShell` read-only classification now canonicalizes common pipeline aliases such as `select`/`sort`/`group`/`where`/`?`, `ft`/`fl`/`fw`/`fc`, and `measure`, while preserving the existing expression/scriptblock guards.
 - `Grep` content output now accepts ripgrep-style no-line-number controls such as `--no-line-number` and `-N`, plus snake/camel adjacent aliases, to disable default line-number output with structured state preserved.
 - `Grep` content output now accepts `column`/`column_numbers`/`columnNumbers`/`column-number`/`--column`, emitting `path:line:column:text` for matching lines while preserving context-line formatting and structured column metadata.
 - `Grep` files-with-matches output now mirrors the official modified-time sort: newest files first, path tie-breaker, and pagination applied after sorting.

internal/tools/powershell/tools.go

@@ -1944,6 +1944,24 @@ func canonicalCommand(command string) string {
 		return "write-output"
 	case "sleep":
 		return "start-sleep"
+	case "select":
+		return "select-object"
+	case "sort":
+		return "sort-object"
+	case "group":
+		return "group-object"
+	case "where", "?":
+		return "where-object"
+	case "ft":
+		return "format-table"
+	case "fl":
+		return "format-list"
+	case "fw":
+		return "format-wide"
+	case "fc":
+		return "format-custom"
+	case "measure":
+		return "measure-object"
 	default:
 		return name
 	}

internal/tools/powershell/tools_test.go

@@ -137,6 +137,15 @@ func TestPowerShellCommandClassification(t *testing.T) {
 		"Get-Process | Sort-Object Name",
 		"Get-Process | Group-Object Name",
 		"Get-Process | Where-Object Name -EQ go",
+		"Get-Process | select Name",
+		"Get-Process | sort Name",
+		"Get-Process | group Name",
+		"Get-Process | where Name -EQ go",
+		"Get-Process | ft Name",
+		"Get-Process | fl Name",
+		"Get-Process | fw Name",
+		"Get-Process | fc Name",
+		"Get-Process | measure CPU",
 		"Get-Process | Format-Table -AutoSize Name",
 		"Get-Process | Format-List Name",
 		"Get-Process | Format-Wide Name",
@@ -258,6 +267,7 @@ func TestPowerShellCommandClassification(t *testing.T) {
 		"Start-Sleep -Seconds $env:SECRET",
 		`Get-ItemProperty HKLM:\Software -Name Path`,
 		"Get-Process | Select-Object $env:SECRET",
+		"Get-Process | select $env:SECRET",
 		"Get-Process | Select-Object @{N='x';E={Remove-Item out.txt}}",
 		"Get-Process | Where-Object { Remove-Item out.txt }",
 		"Get-Process | Format-Table -Property:$env:SECRET",