rippy-cli 0.2.0

A shell command safety hook for AI coding tools (Claude Code, Cursor, Gemini CLI) — Rust rewrite of Dippy
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105

# Recommended rippy TOML configuration
#
# This file demonstrates the .rippy.toml format with effective rejection
# messages that guide AI tools toward safe alternatives.
#
# Place as .rippy.toml in your project root, or ~/.rippy/config.toml for global.

[settings]
default = "ask"
package = "develop"    # safety package: review, develop, or autopilot

# --- Git safety ---

[[rules]]
action = "deny"
pattern = "git push --force"
message = "Use `git push --force-with-lease` instead — it checks for upstream changes before overwriting"

[[rules]]
action = "deny"
pattern = "git reset --hard"
message = "Use `git stash` to save changes, or `git reset --soft` to keep changes staged"

[[rules]]
action = "deny"
pattern = "git checkout -- ."
message = "This discards all unstaged changes. Use `git stash` to save them first"

[[rules]]
action = "allow"
pattern = "git status"

[[rules]]
action = "allow"
pattern = "git log"

[[rules]]
action = "allow"
pattern = "git diff"

[[rules]]
action = "allow"
pattern = "git branch"

# --- File safety ---

[[rules]]
action = "deny-redirect"
pattern = "**/.env*"
message = "Do not write to environment files — they may contain secrets"

[[rules]]
action = "deny-redirect"
pattern = "**/*.pem"
message = "Do not write to PEM files — they contain private keys"

# --- Package management ---

[[rules]]
action = "ask"
pattern = "npm install"
message = "Verify the package name is correct and from a trusted source"

[[rules]]
action = "ask"
pattern = "pip install"
message = "Verify the package name and consider using a virtual environment"

# --- Destructive operations ---

[[rules]]
action = "deny"
pattern = "rm -rf /"
message = "Never delete the root filesystem. Use specific paths like `rm -rf ./build/`"

[[rules]]
action = "deny"
pattern = "rm -rf ~"
message = "Never delete the home directory. Use specific paths"

# --- Container safety ---

[[rules]]
action = "ask"
pattern = "docker run *"
message = "Verify the image source and any volume mounts before running containers"

# --- MCP tools ---

[[rules]]
action = "allow-mcp"
pattern = "mcp__github__*"

# --- Post-execution feedback ---

[[rules]]
action = "after"
pattern = "git commit"
message = "Changes committed locally. Don't forget to push when ready."

# --- Aliases ---

# [[aliases]]
# source = "~/custom-git"
# target = "git"