# bash
allow cat
allow cd
allow echo
allow find
allow grep
allow head
allow ls
allow mkdir
allow python3
allow rg
allow tail
allow test
allow wc

# git
allow git add
allow git branch
allow git commit
allow git diff
allow git log
allow git restore
allow git show
allow git stash
allow git status
allow git worktree

# uv
allow uv run crowd-control
allow uv run pytest
allow uv run python
allow uv run ruff
allow uv sync

# deny
deny just publish-prod # user only
deny just publish-test # user only
deny op # user only
deny pytest # use: uv run pytest
deny python -m pytest # use: uv run pytest
deny uv publish # user only
deny uv run python3 # use: uv run python
