Module commands 

Command spec trait and per-tool implementations. Command evaluation specs: per-tool logic for deciding allow/ask/deny.

This module contains the CommandSpec trait and two categories of implementation:

• simple — A data-driven spec for flat command lists (allow/ask/deny with no subcommand awareness).
• tools — Subcommand-aware evaluators for specific CLI tools (git, cargo, kubectl, gh), each with config-driven classification, env-gated auto-allow, and redirection escalation.

Modules

simple

Data-driven spec for flat allow/ask/deny command lists. Data-driven command spec for flat allow/ask/deny command lists.

tools

Subcommand-aware evaluators for specific CLI tools. Subcommand-aware evaluators for specific CLI tools.

Traits

CommandSpec

Trait for command evaluation specs.