codex/.codex/rules/development.rules

# Shared rules only allow commands that are generally safe for every project
# developer. Prompt and denial policies belong in user config so the repository
# does not impose those flows globally.
# Cargo commands and argument-forwarding recipes may use `--manifest-path` to
# target manifests outside this checkout. That flexibility is an accepted
# tradeoff for development.

prefix_rule(
    pattern = [
        "just",
        [
            "fmt",
            "fmt-check",
            "test",
            "clippy",
            "fix",
            "bench",
            "bench-smoke",
            "bazel-test",
            "bazel-clippy",
            "bazel-lock-check",
            "bazel-lock-update",
            "bazel-argument-comment-lint",
            "argument-comment-lint",
            "build-for-release",
        ],
    ],
    decision = "allow",
    justification = """
Needed: host caches or nested sandbox capabilities.
Safe: these non-publishing recipes are standard development operations.
""",
)

prefix_rule(
    pattern = ["cargo", ["build", "check", "clippy", "test"]],
    decision = "allow",
    justification = """
Needed: Cargo uses host registry, Git, and cache state.
Safe: these non-installing subcommands are standard development operations.
""",
)

prefix_rule(
    pattern = ["cargo", "nextest", "run"],
    decision = "allow",
    justification = """
Needed: Nextest needs host runtime and nested sandboxes.
Safe: it only runs tests and does not install or publish artifacts.
""",
)

prefix_rule(
    pattern = ["bazel", ["build", "test", "query", "aquery", "cquery"]],
    decision = "allow",
    justification = """
Needed: Bazel uses its host output base and caches.
Safe: these commands only build, test, or inspect trusted checkout targets.
""",
)

prefix_rule(
    pattern = ["pnpm", ["format", "test"]],
    decision = "allow",
    justification = """
Needed: pnpm uses its host store and metadata cache.
Safe: checked-in scripts exclude install, exec, and publish operations.
""",
)

prefix_rule(
    pattern = ["pnpm", "run", ["format", "test"]],
    decision = "allow",
    justification = """
Needed: pnpm uses its host store and metadata cache.
Safe: checked-in scripts exclude install, exec, and publish operations.
""",
)