Just is a command runner that reads user-authored files, that are similar to makefiles, and runs the commands that those files contain. Because those commands are shell script snippets that expect to have the same permissions as the user, and see the same filesystem as the user, just requires classic confinement.
I’m the author of just, and the github repo is here: https://github.com/casey/just/
Thank you!