# Bash CLI contracts: trusted selected-file lookup and explicit matching diagnostics; untrusted calls are rejected.
exec semedit lookup --language bash --trust-workspace --bash-bin $SEMEDIT_TEST_BASH_LS --file scripts/tool.sh --symbol f
stdout 'scripts/tool\.sh:2:[0-9]+.*function f'
! semedit lookup --language bash --bash-bin $SEMEDIT_TEST_BASH_LS --file scripts/tool.sh --symbol f
stderr 'workspace trust required'
exec semedit verify --language bash --trust-workspace --bash-bin $SEMEDIT_TEST_BASH_LS --file scripts/tool.sh
stdout 'Verification clean: 0 diagnostics.'
! semedit verify --language bash --trust-workspace --bash-bin $SEMEDIT_TEST_BASH_LS --file scripts/tool.sh --format-selected-file
stderr 'operation is not supported'
cmp scripts/tool.sh want.sh
exec semedit lookup --language bash --trust-workspace --bash-bin $SEMEDIT_TEST_BASH_LS --file scripts/ambiguous.sh --symbol f
stdout 'Ambiguous lookup for "f".*2 candidates\.'
exec semedit lookup --language bash --trust-workspace --bash-bin $SEMEDIT_TEST_BASH_LS --file scripts/declarations.sh --symbol fun
stdout 'scripts/declarations\.sh:[0-9]+.*function fun'
exec semedit lookup --language bash --trust-workspace --bash-bin $SEMEDIT_TEST_BASH_LS --file scripts/declarations.sh --symbol loc
stdout 'scripts/declarations\.sh:[0-9]+.*variable loc'

-- scripts/tool.sh --
#!/usr/bin/env bash
f() { echo safe; }
-- scripts/ambiguous.sh --
#!/usr/bin/env bash
f() { :; }
# SEMEDIT_TEST_AMBIGUOUS
-- scripts/declarations.sh --
function fun() {
 local loc=value
}
-- want.sh --
#!/usr/bin/env bash
f() { echo safe; }