internal/

Package config loads and compiles turnstile policy rules from a TOML file.

Package gate evaluates tool-use requests against compiled allow/deny rules.

Package shell parses Bash command strings into normalized segments for policy evaluation: subshell extraction, quote masking, heredoc handling, and pipeline splitting.