Guard PowerShell event query expressions

Author: SqlRush

docs/cc-100-roadmap.md

@@ -259,6 +259,8 @@ M5 补充：PowerShell read-only classifier 收紧 metadata 查询类 cmdlet，`
 
 M5 补充：PowerShell read-only classifier 收紧网络/DNS 查询类 cmdlet，`Get-NetAdapter`/`Get-NetIPAddress`/`Get-NetIPConfiguration`/`Get-NetRoute`/`Get-DnsClientCache`/`Get-DnsClient` 继续允许普通 literal 查询参数，但拒绝 `$env:`、hashtable 等动态表达式参数。
 
+M5 补充：PowerShell read-only classifier 收紧事件日志/CIM 查询类 cmdlet，`Get-EventLog` 和 `Get-CimClass` 继续允许普通 literal 查询参数，但拒绝 `$env:`、hashtable 等动态表达式参数。
+
 M5 补充：Bash 前台输出和 `BashOutput` 现在都走统一 tool-result budget 截断/落盘路径；`BashOutput` 增加 100k 最大结果限制，大后台输出会保存完整内容并返回 `full_output_path` 元数据。
 
 M5 补充：Bash/PowerShell 后台任务现在会发 `*_background_started` 和 `*_background_finished` tool progress 事件，包含后台 ID、shell/status、exit/timed_out/cancelled、duration、时间戳和输出字节数，不携带 command 文本；completed、timed_out、cancelled 终态均已覆盖测试。

docs/claude-code-go-rewrite-plan.md

@@ -240,6 +240,7 @@ test/parity/                 # golden tests against TS/official behavior
 - 本轮补充：PowerShell read-only classifier 收紧 `Get-Process`/`Get-Service`，继续允许普通 literal name/id/displayName/include/exclude 查询参数，但拒绝动态表达式参数。
 - 本轮补充：PowerShell read-only classifier 收紧 metadata 查询类 cmdlet，`Get-Location`/`Get-Date`/`Get-PSDrive`/`Get-Module`/`Get-Alias`/`Get-History`/`Get-TimeZone` 继续允许普通 literal 参数，但拒绝动态表达式参数。
 - 本轮补充：PowerShell read-only classifier 收紧网络/DNS 查询类 cmdlet，`Get-NetAdapter`/`Get-NetIPAddress`/`Get-NetIPConfiguration`/`Get-NetRoute`/`Get-DnsClientCache`/`Get-DnsClient` 继续允许普通 literal 查询参数，但拒绝 `$env:`、hashtable 等动态表达式参数。
+- 本轮补充：PowerShell read-only classifier 收紧事件日志/CIM 查询类 cmdlet，`Get-EventLog` 和 `Get-CimClass` 继续允许普通 literal 查询参数，但拒绝 `$env:`、hashtable 等动态表达式参数。
 - 本轮补充：`BashOutput` 现在设置 100k 最大结果大小，和前台 `Bash` 一起覆盖大输出 tool-result preview 截断、完整输出落盘及 `full_output_path` 元数据。
 - 本轮补充：Bash/PowerShell 后台命令现在会通过 tool progress 通道发 started/finished 事件，记录后台 ID、shell/status、exit/timed_out/cancelled、duration、时间戳和 stdout/stderr byte count，且 completed、timed_out、cancelled 终态测试确保 progress 不携带 command 文本。
 - 本轮补充：WebSearch domain filters 现在在 schema 层声明 array `items:string`，通用 tool schema validator 同步支持 `items` 校验；`allowed_domains`/`blocked_domains` 会拒绝空字符串、URL/port、非法 wildcard 和非域名 label。

internal/tools/powershell/tools.go

@@ -1454,8 +1454,9 @@ var powerShellReadOnlyCmdlets = map[string]powerShellReadOnlyConfig{
 		rejectExpressionValues: true,
 	},
 	"get-eventlog": {
-		allowedFlags: stringSet("logname", "newest", "after", "before", "entrytype", "index", "instanceid", "message", "source", "username", "asbaseobject", "list"),
-		valueFlags:   stringSet("logname", "newest", "after", "before", "entrytype", "index", "instanceid", "message", "source", "username"),
+		allowedFlags:           stringSet("logname", "newest", "after", "before", "entrytype", "index", "instanceid", "message", "source", "username", "asbaseobject", "list"),
+		valueFlags:             stringSet("logname", "newest", "after", "before", "entrytype", "index", "instanceid", "message", "source", "username"),
+		rejectExpressionValues: true,
 	},
 	"get-winevent": {
 		allowedFlags:               stringSet("logname", "listlog", "listprovider", "providername", "path", "maxevents", "filterxpath", "force", "oldest"),
@@ -1464,8 +1465,9 @@ var powerShellReadOnlyCmdlets = map[string]powerShellReadOnlyConfig{
 		validatePositionalsAsPaths: true,
 	},
 	"get-cimclass": {
-		allowedFlags: stringSet("classname", "namespace", "methodname", "propertyname", "qualifiername"),
-		valueFlags:   stringSet("classname", "namespace", "methodname", "propertyname", "qualifiername"),
+		allowedFlags:           stringSet("classname", "namespace", "methodname", "propertyname", "qualifiername"),
+		valueFlags:             stringSet("classname", "namespace", "methodname", "propertyname", "qualifiername"),
+		rejectExpressionValues: true,
 	},
 	"start-sleep": {
 		allowedFlags:           stringSet("seconds", "milliseconds", "duration"),

internal/tools/powershell/tools_test.go

@@ -407,11 +407,15 @@ func TestPowerShellCommandClassification(t *testing.T) {
 		"Get-DnsClient -InterfaceAlias $env:IFACE",
 		"Get-NetAdapter -CimSession server",
 		"Get-DnsClientCache -CimSession server",
+		"Get-EventLog -LogName $env:LOG",
+		"Get-EventLog -Source @{N='App'}",
 		"Get-WinEvent -FilterXml '<x />'",
 		"Get-WinEvent -FilterHashtable @{LogName='System'}",
 		"Get-WinEvent -ComputerName server -LogName System",
 		"Get-WmiObject -Class Win32_Process",
 		"Get-CimInstance -ClassName Win32_Process",
+		"Get-CimClass -ClassName $env:CLASS",
+		"Get-CimClass -Namespace @{N='root/cimv2'}",
 		"Get-CimClass -CimSession server -ClassName Win32_Process",
 		"ipconfig set en0 DHCP",
 		"ipconfig /flushdns",