Module tools 

Subcommand-aware evaluators for specific CLI tools. Subcommand-aware evaluators for specific CLI tools.

Each module implements CommandSpec with tool-specific logic: subcommand extraction, read-only vs mutating classification, env-gated auto-allow, and redirection escalation.

Modules

cargo

Subcommand-aware cargo evaluation (build → allow, install → ask, etc.). Subcommand-aware cargo evaluation.

gh

Subcommand-aware GitHub CLI evaluation (pr list → allow, pr create → ask, etc.). Subcommand-aware GitHub CLI (gh) evaluation.

git

Subcommand-aware git evaluation with env-gating and force-push detection. Subcommand-aware git evaluation.

kubectl

Subcommand-aware kubectl evaluation (get → allow, apply → ask, etc.). Subcommand-aware kubectl evaluation.