# bash
allow cat
allow cd
allow echo
allow find
allow grep
allow head
allow ls
allow mkdir
allow python3
allow rg
allow tail
allow test
allow wc

# git
allow git add
allow git branch
allow git commit
allow git diff
allow git log
allow git restore
allow git show
allow git stash
allow git status
allow git worktree

# just
allow just install
allow just test
allow just lint
allow just fmt
allow just run
allow just build

# uv
allow uv run --extra ollama
allow uv run crowd-control
allow uv run pytest
allow uv run python
allow uv run python3
allow uv run ruff
allow uv sync

# deny
deny just publish-prod # user only
deny just publish-test # user only
deny op # user only
deny pytest # use: uv run pytest
deny python -m pytest # use: uv run pytest
deny uv publish # user only
deny uv run python3 # use: uv run python
