Best CLI Tools for Codex

# Codex execution policy for GitHub CLI
# Install as a .rules file under an active Codex rules/ directory.
# Generated mode: read-only
# Mode boundary: R0 exact commands may be used; R1, R2, and R3 commands are forbidden.
# Evidence: verified; checked 2026-07-10; tested version: 2.86.0.
# Prefix rules match trailing arguments. CLI Finder prompts unless a command is explicitly audited as suffix-safe.
# Rules are experimental. Review prefixes, then test with codex execpolicy check.

prefix_rule(
    pattern = ["gh","pr","list","--state","open","--json","number,title,reviewDecision,url"],
    decision = "prompt",
    justification = "R0: Read pull request status and review fields without changing repository state.",
    match = ["gh pr list --state open --json number,title,reviewDecision,url"],
)

prefix_rule(
    pattern = ["gh","pr","merge"],
    decision = "forbidden",
    justification = "R2: Merges code into the target branch and needs explicit approval.",
    match = ["gh pr merge 123 --squash"],
)

prefix_rule(
    pattern = ["gh","repo","delete"],
    decision = "forbidden",
    justification = "R3: Deletes remote repository data and is destructive.",
    match = ["gh repo delete owner/repo"],
)