cli
158 pages in this category.
ccusage
Local-first CLI and TypeScript library that reads JSONL session logs from Claude Code, Codex, and 13 other coding agents to produce daily/weekly/monthly/session/billing-block reports of token spend.
az
Cross-platform command-line interface for managing Azure resources, running ARM-based and data-plane operations from a terminal or pipeline.
wrangler
Package-level reference for the wrangler CLI on npm — install, Node support, transitive dependency footprint, and platform-binding gotchas.
webpack
Daily-driver reference for webpack — CLI commands, dev server, loaders, plugins, code splitting, common config recipes.
vue (@vue/cli)
The legacy @vue/cli command-line tool for scaffolding and serving Vue projects — deprecated in favour of create-vue + Vite, retained as reference for existing apps.
vercel
Vercel's official CLI for deploying frontend apps, managing environments, syncing env vars, tailing logs, and rolling back via alias re-pointing.
vercel
Package-level reference for the vercel CLI on npm — install, Node support, command surface, project linking model, and where it fits next to wrangler / netlify-cli.
typer
Package-level reference for the Typer CLI library on PyPI — install variants, version policy, extras, and alternatives.
tsx
Daily-driver reference for the tsx CLI — run TS files, watch mode, ESM/CJS handling, Node loader integration.
ts-node
Daily-driver reference for the ts-node CLI — REPL, transpile-only mode, ESM loader, common script patterns.
tqdm
Package-level reference for tqdm on PyPI — install variants, notebook extra, version policy, and alternatives.
rollup
Daily-driver reference for rollup — CLI commands, multi-format output, plugin chain patterns, library publishing config.
rich
Package-level reference for rich on PyPI — install variants, single-file design, version policy, and alternatives.
pygmentize
Highlight source code from the command line — many lexers, many output formats.
nodemon
Daily-driver reference for nodemon — watch flags, exec patterns, config files, lifecycle events.
ncu
The ncu CLI from npm-check-updates rewrites package.json to bump dependency versions — interactive mode, filters, doctor rollback, and workspaces support.
esbuild
Daily-driver reference for esbuild — bundle CLI, transform API, JS API patterns, common build recipes.
diff2html-cli
Package-level reference for the diff2html-cli renderer on npm — install, runtime support, peer-deps, and alternatives.
commander
Package-level reference for the commander CLI framework on npm — install, version policy, TypeScript extras, and alternatives.
click
Package-level reference for the click CLI toolkit on PyPI — install, version policy, extras, and alternatives.
chalk
Package-level reference for the chalk ANSI-styling library on npm — install, ESM-only policy, peer-deps, and alternatives.
AWS CLI
Drive every AWS service from a terminal. Covers install (pip vs v2 installer), aws configure, profiles, SSO, day-to-day commands across S3 / EC2 / Lambda / IAM / STS, common scenarios, and credential precedence.
Zowe CLI
Open-source command-line bridge into z/OS — manage datasets, jobs, USS files, consoles, TSO, and Db2 from Mac/Linux/Windows over z/OSMF or RSE-API.
xcopy
Copy files and directory trees with attribute preservation, date filtering, exclusion lists, and verification. The step between copy and robocopy for most scripting needs.
xattr
Deep-dive on macOS extended attributes — listing, reading, writing, and removing xattrs with xattr(1); the Gatekeeper com.apple.quarantine flag; Spotlight metadata attributes; ACLs via ls -le and chmod +a; preserving attributes on copy with cp -p and rsync -X.
wsl
Install, list, export, import, configure, and clone WSL distributions using the wsl.exe command on Windows 10 and 11.
wmic
Query and manage Windows system information — hardware, software, processes, services, and more — from the command prompt using WMI classes and WMIC's SQL-like syntax.
whoami
Display the current user name, SID, group memberships, and privileges from the Windows command prompt — essential for auditing security context in scripts and support scenarios.
wevtutil
Query, export, clear, and manage Windows Event Log channels from the command line — the primary CLI for event log automation, log archiving, and scripted log analysis on Windows.
tzutil & w32tm
Read and set the system timezone with tzutil, then query, configure, and force-sync the Windows Time service with w32tm — including NTP peer configuration and Kerberos-clock-drift recovery.
tracert
Trace the sequence of routers between your machine and a destination by sending probes with increasing TTL values — the go-to tool for locating where a network path breaks or introduces high latency.
tmutil
Drive Time Machine backups, destinations, exclusions, local APFS snapshots, restores, and verification entirely from the terminal — without opening System Settings.
timeout
Pause a batch script for a specified number of seconds with an optional keypress bypass — a reliable replacement for the ping-delay idiom and a safer alternative to sleep in Windows CMD scripts.
tasklist
Display all running processes on a local or remote Windows machine with PID, memory usage, session, and optional service or module details — the cmd.exe equivalent of Task Manager for scripts.
taskkill
End one or more running Windows processes by PID or image name from the command prompt, with options for force termination, process tree killing, filtering, and remote targets.
takeown
Transfer ownership of files and directories to the current user or the Administrators group from an elevated command prompt — a prerequisite for modifying ACLs on system-protected paths.
systeminfo
Display detailed OS, hardware, and network configuration for the local or a remote Windows machine. Covers output formats, remote querying, filtering, and parsing in scripts.
system_profiler
Deep-dive on system_profiler(8) — macOS's built-in inventory tool. Covers data types, text/XML/JSON output, piping into jq and plutil, common SP* probes (hardware, displays, memory, storage, USB, network, software), detail levels, and fleet inventory recipes.
Sysinternals
Bootstrap and drive the headless Sysinternals utilities — PsExec, Handle, PsList, Autoruns, ProcMon, ListDLLs — for process spelunking, file-lock hunting, autostart auditing and scripted system tracing on Windows.
ssh
Connect to remote hosts, transfer files, and forward ports over an encrypted channel using the OpenSSH client built into Windows 10 and later.
softwareupdate
Deep-dive on softwareupdate(8), Apple's CLI for macOS system updates — listing pending updates, installing recommended-only or specific items, scheduling, ignoring updates, installing Rosetta and Command Line Tools, and pairing with mas and brew for full system update automation.
sips
macOS built-in image processor covering format conversion, resizing, cropping, rotation, color profiles, metadata inspection, and batch processing recipes.
shutdown
Initiate, schedule, abort, or force a shutdown, restart, logoff, hibernate, or sleep on a local or remote Windows machine from the command line — essential for scripted maintenance, patch automation, and remote administration.
set
Set, display, and delete cmd.exe environment variables within the current session, perform integer arithmetic with /A, and read interactive user input with /P.
schtasks
Create, query, run, end, and delete scheduled tasks on local or remote Windows machines from the command prompt — the scripting interface to Windows Task Scheduler.
sc
Query, create, configure, start, stop, and delete Windows services from the command line — the scripting interface to the Service Control Manager, equivalent to the Services MMC snap-in but fully automatable.
runas
Launch a program in the security context of a different user account — elevate to Administrator, switch to a service account, or test application behaviour under a restricted identity.
route
Display, add, delete, and modify entries in the Windows IP routing table — control how packets are forwarded between subnets, add persistent static routes, and diagnose routing failures.
robocopy
Production-grade file and directory synchronisation with mirroring, multi-threading, retry logic, logging, and exclusion filters. The go-to for backup scripts and deployment pipelines on Windows.
rmdir / rd
Delete empty or entire directory trees from the Windows command prompt. Covers the /S and /Q flags, force-removing read-only trees, and safe deletion patterns.
reg
Query, add, modify, export, and import Windows registry keys and values with the built-in reg.exe — the scriptable, no-dependency tool for everything from one-off tweaks to full backup-and-restore.
PowerShell Essentials
Variables, operators, pipelines, Where-Object, ForEach-Object, Select-Object, sorting, grouping, remoting, jobs, CIM, registry, JSON, error handling, and common cmdlets.
powercfg
Manage Windows power plans, enable or disable hibernation, diagnose battery health and sleep failures, and generate energy efficiency reports from the command prompt.
pmset
Inspect and configure sleep, wake, hibernate, and battery behaviour on macOS. Covers per-source profiles, scheduled wake, sleep-prevention diagnostics, battery reports, and hibernate modes.
ping
Send ICMP echo requests to a host to test reachability, measure round-trip latency, and detect packet loss from the Windows command prompt.
pbcopy & pbpaste
Pipe data into and out of the macOS pasteboard from the shell — multi-pasteboard targets, newline handling, shell aliases, and real-world copy-paste recipes.
pathping
Trace the route to a destination and measure per-hop packet loss and latency over a sustained sampling period — more diagnostic than tracert and more thorough than ping for identifying intermittent network problems.
osascript
Drive macOS GUI apps, system events, dialogs, notifications, and Finder from the terminal using AppleScript or JavaScript for Automation (JXA).
nslookup
Query DNS servers for A, AAAA, MX, TXT, NS, PTR, and other resource records from the Windows command prompt — the built-in tool for diagnosing name resolution issues.
networksetup
Script every aspect of macOS network configuration — Wi-Fi joining, DNS servers, proxies, locations, and service order — from a single first-party command-line tool.
netstat
Display active TCP/UDP connections, listening ports, routing tables, interface statistics, and per-connection process IDs from the Windows command prompt.
netsh
Configure network interfaces, firewall rules, wireless profiles, port proxies, and Winsock settings from an elevated command prompt — the comprehensive Windows network configuration CLI.
net user
Create, modify, delete, and list local Windows user accounts from the command prompt — set passwords, manage account expiry, lock/unlock accounts, and control logon hours.
net localgroup
Create, delete, and modify local security groups on a Windows machine — add or remove members, list group memberships, and manage built-in groups from the command prompt.
nano
GNU's small, on-screen-hinted terminal text editor — the default modal-free alternative to vi/emacs that you can drive without ever learning a command vocabulary.
move
Move files to a new location or rename them within the Windows command prompt. Covers single files, wildcards, directory renames, overwrite control, and cross-drive behaviour.
mountvol
List, create, and remove NTFS volume mount points and display the unique volume GUID path for any drive letter or directory junction from the command prompt.
mkdir / md
Create one or more directories from the Windows command prompt. Covers single and nested directory creation, batch patterns, and common scripting idioms.
mdfind
Query macOS's Spotlight index from the shell — fast name, content, and metadata search across the whole filesystem, with scope, attributes, and live-update modes.
macOS CLI
Comprehensive macOS terminal reference covering file management, processes, networking, Homebrew, defaults, diskutil, launchctl, pbcopy/pbpaste, open, say, and power-user recipes.
logman
Create, start, stop, and manage Data Collector Sets for performance counters, event traces, and configuration data — the command-line interface to Windows Performance Monitor for scripted monitoring and automated log collection.
JES2
z/OS Job Entry Subsystem 2 operator slash-commands for jobs, initiators, output, classes, NJE, and spool — from the console and from SDSF.
ipconfig
Display and manage TCP/IP network configuration for all adapters on a Windows machine — covers full adapter details, DNS cache operations, and DHCP lease management.
IEBCOPY
IBM utility for copying, merging, compressing, unloading, and reloading PDS and PDSE libraries on z/OS, including member selection, rename, and exclusion.
icacls
Display and modify NTFS access control lists on files and directories — grant, deny, or remove permissions for users and groups, manage inheritance, and save or restore full ACL sets.
hostname
Display the DNS hostname of the local Windows machine from the command prompt — useful in scripts to identify the machine without parsing systeminfo output.
gpresult & gpupdate
Inspect the Resultant Set of Policy that applied to a user and computer with gpresult, then force a refresh with gpupdate — including HTML reports, scope filtering, and the classic 'why didn't my GPO take effect?' workflow.
getmac
Display the MAC (hardware) addresses and associated transport names for all network adapters on a local or remote Windows machine — useful for asset inventory, DHCP reservation setup, and network access control.
GDG
Define, reference, and clean up z/OS generation data groups via IDCAMS — relative generations, rollover behaviour, model DSCBs, and the modern GDGEXTENDED mode.
fsutil
Inspect and manage NTFS file system internals — query volume info, manage hard links, sparse files, reparse points, the USN journal, and the dirty bit — from an elevated command prompt.
findstr
Search for string patterns inside files or piped input on Windows — the built-in grep equivalent for cmd.exe, with support for regular expressions, case-insensitive matching, and recursive directory searches.
fc
Compare two text or binary files line-by-line or byte-by-byte and report their differences — the built-in Windows equivalent of Unix diff for quick file audits in cmd.exe.
echo
Print text to stdout, expand environment variables, write blank lines, redirect output to files, and toggle command-echoing in cmd.exe batch scripts.
duti
Drive macOS Launch Services from the command line — assign default apps for UTIs, file extensions, and URL schemes; understand the viewer/editor/all/shell/none roles; bulk-load file associations from a settings file; rebuild the Launch Services database when changes refuse to stick.
driverquery
Display all installed device drivers on a local or remote Windows machine — module name, type, link date, and driver file path — for hardware audits and troubleshooting.
dism
Service Windows images and the running OS — enable/disable optional features, repair the component store, mount and edit WIM/ESD images, add drivers, and manage editions from an elevated command prompt.
diskutil
Command-line front-end to Disk Utility on macOS — list, partition, format, repair, encrypt, and snapshot APFS containers, plus build and tear down software RAID volumes.
diskpart
Create, delete, format, extend, shrink, and assign drive letters to disk partitions from the Windows command prompt using an interactive or scripted REPL interface.
dir
Display files and folders in a directory with filtering, sorting, formatting, and recursive traversal options. The Windows cmd.exe equivalent of Unix ls.
del
Delete one or more files from the Windows command prompt. Covers wildcards, quiet mode, attribute overrides, recursive deletion patterns, and the distinction from rmdir.
defrag
Analyze, defragment, and optimize volumes from the command line — consolidate free space on HDDs, issue TRIM on SSDs, and schedule or review optimization tasks.
copy
Copy one or more files to a new location in the Windows command prompt. Covers single-file copy, wildcard batches, file concatenation, and binary vs ASCII modes.
codesign
End-to-end macOS distribution pipeline — sign binaries and app bundles with codesign, notarize with notarytool, staple tickets with stapler, and verify Gatekeeper acceptance with spctl.
cls
Clear all text from the cmd.exe or PowerShell console window and reset the cursor to the top-left — the single command for resetting a terminal session's visible output.
chkdsk
Scan a FAT or NTFS volume for file system errors and bad sectors, optionally repairing them — the built-in Windows disk health and integrity tool for drives and volumes.
certutil
The dual-purpose Windows CLI for certificate-store management and as the most reliable built-in tool for file hashing, base64 encoding, and CRL/CTL handling — no install required.
cd
Navigate the Windows command prompt's current working directory. Covers drive switching, absolute and relative paths, UNC paths, and path-with-spaces quoting.
caffeinate
Prevent display, idle, system, or user-active sleep for the duration of a command, a fixed time, or a process — without permanently changing pmset.
bcdedit
View and modify the Windows Boot Configuration Data store — manage boot entries, set default OS, change timeouts, enable debugging, and configure boot options from an elevated command prompt.
attrib
View and modify Windows file attributes (hidden, read-only, system, archive) from the command line. Covers all attribute flags, recursive operations, and practical recipes for unhiding malware-hidden files and managing backups.
arp
Display, add, and delete entries in the Windows ARP (Address Resolution Protocol) cache — map IP addresses to MAC addresses, detect IP conflicts, and diagnose Layer 2 connectivity issues.
xidel Web Scraping & Data Extraction
Extract data from HTML, XML, and JSON using XPath, CSS selectors, pattern matching, and JSONiq from the command line.
wget
Non-interactive network downloader. Covers single and batch downloads, recursive mirroring, authentication, resuming, rate limiting, and site archiving.
vim
Bram Moolenaar's modal editor. Covers modes, verb-noun grammar, text objects, registers, marks, windows, search-and-replace, quickfix, macros, configuration, and a high-value baseline .vimrc.
ts-node, tsx & Friends
Compare ts-node, tsx, Node 22.6+ --experimental-strip-types, Bun, and Deno for running .ts files directly; pick the right tool, configure watch mode, and avoid the classic ESM / type-strip pitfalls.
tmux
Run multiple persistent terminal sessions, windows, and panes inside one shell. Covers the session/window/pane mental model, default keybindings, copy-mode, and a minimal tmux.conf.
tar
Bundle directory trees into a single archive file with optional compression. Covers create/extract/list, gzip/bzip2/xz formats, exclusions, transforms, and incremental backups.
SoX
Comprehensive SoX reference covering file info, format conversion, synthesis, playback, recording, combining, effects (trim, reverb, compand, rate, pitch, tempo, noise gate), batch processing, spectrograms, and piping.
shellcheck
Catch quoting bugs, missing checks, and POSIX portability mistakes in shell scripts. Covers every flag, severity levels, inline directives, CI/pre-commit integration, and the most common rules.
sed
Non-interactive text transformation. Substitution, deletion, insertion, address ranges, in-place editing, and multi-line patterns with practical recipes.
rsync
Copy and synchronise files locally or over SSH using a delta-transfer algorithm that only sends changed parts. Covers archive mode, deletion, filtering, progress, and snapshot backups.
ripgrep (rg)
Modern grep replacement written in Rust. Respects .gitignore, searches hidden files optionally, supports PCRE2, and is significantly faster on large codebases.
ps, ss & netstat
Inspect running processes (ps), list network connections and listening ports (ss / netstat). Covers output formats, filtering, process trees, and socket state analysis.
permissions
POSIX file permissions on Linux. Covers symbolic and octal chmod, ownership with chown, the meaning of r/w/x for files vs. directories, setuid/setgid/sticky bits, umask, ACLs, capabilities, and immutable attributes.
make
Practical Makefile patterns: targets, prerequisites, automatic variables, pattern rules, parallel builds, and a working lint/test/build/clean workflow for any project.
lsof & ss
Diagnose what's holding a port, which files a process has open, and the state of every TCP/UDP socket using lsof and the modern iproute2 ss utility.
jq
Slice, filter, map, and transform JSON data from the command line. Covers all essential filters, built-in functions, select, map, reduce, streaming, jq 1.7/1.8 additions, and real-world API response processing.
journalctl
Query and follow systemd's structured journal. Covers unit filters, time ranges, priority levels, boot logs, namespaces, invocations, output formats, persistence, configuration, and disk-vacuum.
ip
Modern replacement for ifconfig, route, and arp. Inspect and configure interfaces, addresses, routes, neighbour tables, and network namespaces with the iproute2 ip command.
ImageMagick
Comprehensive ImageMagick 7 reference covering magick, identify, mogrify, composite, montage, format conversion, resize, crop, rotate, color adjustments, effects, drawing, text, PDF operations, policy.xml hardening, and batch processing.
htop
Interactive process and resource monitor for the terminal. Covers function keys, sorting, filtering, signal sending, tree view, threads, and how to read load averages and memory correctly. Compares with top, btop, and bottom.
grep
Search files and streams using fixed strings, extended regex, or PCRE. Covers all major flags, context, recursive search, and pipeline patterns.
gpg
Practical GnuPG cheat sheet — generate keys, sign and verify files, encrypt for a recipient, sign git commits and tags, and manage trust without the bureaucracy.
git
Complete Git reference. Setup, staging, committing, branching, merging, rebasing, stashing, remotes, tags, log inspection, undoing mistakes, submodules, and power-user aliases.
gh
Complete GitHub CLI reference. Auth, configuration, repos, issues, pull requests, releases, Actions, attestations, projects, models, rulesets, caches, secrets, gists, search, API, extensions, and codespaces.
fzf
Interactive fuzzy finder for the terminal. Covers key bindings, shell integration, previews with bat and tree, multi-select, popup/tmux mode, --listen IPC, and pipelines with git, kill, and vim.
fish
Comprehensive fish shell reference covering syntax, variables, functions, abbreviations, completions, config files, path management, prompt customization, Fisher plugins, fish 4.x features (Rust rewrite), and migration from bash/zsh.
ffprobe
Comprehensive ffprobe reference for inspecting media files — formats, streams, frames, packets, chapters, metadata — with output formats (default, json, csv, xml, flat, ini), select_streams, show_entries, and one-liners for duration, fps, codec, resolution, and bitrate.
FFmpeg
Comprehensive FFmpeg reference covering transcoding, container conversion, scaling, filters, audio, subtitles, streaming, batch processing, and ffplay — with NVIDIA NVENC/NVDEC/CUDA alternatives, Vulkan compute codecs, VVC/H.266 decoding, and the FFmpeg 8.0 Whisper filter.
fd
Modern find replacement written in Rust. Simpler syntax, respects .gitignore, supports regex and glob patterns, parallel execution, and coloured output.
eza / exa
A modern ls replacement with colour coding, Git status, icons, tree view, and rich metadata. eza is the actively maintained fork of the original exa project.
dig
Query DNS records of any type from any resolver — A, AAAA, MX, TXT, NS, SOA, SRV, CAA — with formatted output, reverse lookups, and full delegation tracing.
df, du & duf
Check filesystem free space (df), measure directory sizes (du), and view a colourful disk overview (duf). Covers all key flags, human-readable output, modern alternatives (dust, gdu, ncdu), and common sysadmin recipes.
Deno
Deno is a secure, modern JavaScript and TypeScript runtime built on V8 with permission-based sandboxing, built-in TypeScript, a curated standard library on JSR, and a complete toolchain (fmt, lint, test, bench, compile).
cut, paste & join
Extract columns by delimiter or byte position (cut), merge files column-wise (paste), and join on a common key field (join). Essential for tab/CSV/field-delimited data.
curl
Transfer data with URLs. Covers HTTP methods, headers, authentication, forms, TLS, cookies, proxies, timeouts, parallel downloads, and a comprehensive recipe collection.
cron
Time-based job scheduler on Unix. Covers crontab syntax, user vs. system crontabs, environment quirks, logging, anacron, and the modern systemd timer alternative.
Claude Code CLI
All claude CLI flags, startup modes, non-interactive usage, environment variables, keyboard shortcuts, subcommands, exit codes, and configuration file locations in one place.
Chalk
Apply ANSI colours, backgrounds, and text styles to terminal output in Node.js using Chalk's chainable API, plus comparisons with picocolors and patterns for building polished CLI UX.
Bun
Bun is a fast all-in-one JavaScript runtime, package manager, bundler, and test runner written in Zig — a drop-in replacement for Node.js and npm with built-in TypeScript and JSX support.
bat
A cat clone with syntax highlighting, Git integration, line numbers, paging, and diff support. Drop-in replacement with many quality-of-life improvements for viewing files in the terminal.
Bash
Comprehensive Bash scripting reference covering variables, parameter expansion, control flow, functions, arrays, string manipulation, arithmetic, traps, process substitution, and the Bash 5.3 in-shell command substitution forms.
awk / gawk
Pattern-action language for structured text. Field splitting, built-in variables, arithmetic, string functions, arrays, BEGIN/END blocks, and practical data-processing recipes.
aria2c Download Utility
Fast, multi-protocol download utility supporting HTTP(S), FTP, SFTP, BitTorrent, and Metalink with resumption and parallel connections.
argparse
Parse command-line arguments with Python's stdlib argparse module. Covers positional/optional args, subparsers, nargs, validation, mutually exclusive groups, FileType, env-var fallbacks, and argcomplete.
wrangler
Cloudflare's official CLI for building, configuring, and deploying Workers, Pages, KV, R2, D1, Vectorize, Hyperdrive, Queues, Workflows, and Secrets.
Bash Redirection & Pipes
stdin, stdout, stderr redirection operators and pipeline patterns in bash.
diff2html-cli
Convert unified diffs and git diff output into styled HTML side-by-side or line-by-line diff views from the command line.
typer
Build command-line interfaces using Python type annotations with Typer. Covers commands, options, arguments, subcommands, callbacks, rich output, and testing.
tqdm
Add auto-updating progress bars to any Python loop or CLI pipeline with tqdm. Covers iterables, manual updates, pandas integration, nested bars, async, Jupyter, and byte-piping.
rich
Make terminal output beautiful with Rich. Covers styled print, Console, tables, progress bars, syntax highlighting, live displays, and the rich-cli command.
Python One-Liners
Useful Python one-liners runnable directly from the shell with python -c or python -m. No file creation needed.
Python CLI Snippets
Short standalone Python scripts for common tasks — file I/O, JSON manipulation, HTTP requests, CSV processing, and data transformation.
pathlib
Work with filesystem paths using Python's built-in pathlib module. Covers Path creation, navigation, reading/writing files, glob patterns, and stat.
click
Build command-line interfaces with click using decorators. Covers commands, options, arguments, groups, prompts, and progress bars.
tr & xargs
Translate, squeeze, and delete characters with tr. Build and execute command lines from stdin with xargs. Includes parallel execution, NUL safety, and pipeline recipes.
sort, uniq & wc
Sort lines (numerically, by field, human-readable sizes), deduplicate with uniq, count lines/words/bytes with wc, and number lines with nl. With real-world pipeline recipes.
find
POSIX file finder with capable expression-based filters for name, type, size, time, permissions, and ownership. Covers exec actions, pruning, and real-world recipes.