feat(commands): add /update to direct command detection

Author: om-mapari

shello_cli/agent/template.py

@@ -148,7 +148,7 @@
 <secrets_handling>
 CRITICAL - Never expose secrets in plain-text commands.
 Store in env var first: API_KEY=$(secret_manager --name=x) then use $API_KEY
-If user input has asterisks (redacted), use {{secret_name}} placeholder.
+If user input has asterisks (redacted), use {{{{secret_name}}}} placeholder.
 </secrets_handling>
 
 <output_management>
@@ -163,7 +163,7 @@
 
 Filter Examples:
   ✅ aws lambda list-functions | jq '.Functions[].FunctionName'
-  ✅ docker ps --format "{{.Names}}"
+  ✅ docker ps --format "{{{{.Names}}}}"
   ✅ kubectl get pods -o name
   ❌ aws lambda list-functions (dumps everything)
   ❌ aws ec2 describe-instances (massive JSON)
@@ -176,7 +176,7 @@
 
 Common patterns:
   | jq '.Items[].Name'           # List names
-  | jq '.[] | {name, status}'    # Specific fields  
+  | jq '.[] | {{name, status}}'    # Specific fields  
   | jq '. | length'              # Count items
 </json_handling>
 

shello_cli/commands/command_detector.py

@@ -292,10 +292,15 @@ def _is_question_structure(self, text: str, words: list) -> bool:
             if words[1] in self.PRONOUNS or words[1] == 'there':
                 return True
 
-        # Question word in middle with auxiliary verb
+        # Question word in middle - but only if there's additional natural language context
+        # This prevents false positives like "env why" where "why" is just an argument
         for i, word in enumerate(words[1:], 1):
             if word in self.QUESTION_WORDS and i > 0:
-                return True
+                # Require additional context: auxiliary verbs, pronouns, or multiple question words
+                if (any(w in auxiliary_verbs for w in words) or
+                    any(w in self.PRONOUNS for w in words) or
+                    sum(1 for w in words if w in self.QUESTION_WORDS) > 1):
+                    return True
 
         return False