safe-chains 0.136.0

Auto-allow safe bash commands in agentic coding tools
Documentation
[[command]]
name = "bun"
description = "All-in-one JavaScript/TypeScript runtime, bundler, and package manager. bun build writes compiled output to disk. bun test executes test files, which run arbitrary user code. bun outdated and bun pm subcommands are read-only local queries. bun x downloads and executes arbitrary npm packages, so safety depends entirely on which package is invoked. Rapidly evolving project with releases every few weeks; new subcommands appear frequently."
url = "https://bun.sh/docs/cli"
bare_flags = ["--help", "--version", "-V", "-h"]

[[command.sub]]
name = "build"
level = "SafeWrite"
bare = false
standalone = [
    "--bytecode", "--compile", "--css-chunking",
    "--emit-dce-annotations", "--help", "--minify", "--minify-identifiers",
    "--minify-syntax", "--minify-whitespace", "--no-bundle",
    "--no-clear-screen", "--production", "--react-fast-refresh",
    "--splitting", "--watch", "--windows-hide-console",
    "-h",
]
valued = [
    "--asset-naming", "--banner", "--chunk-naming", "--conditions",
    "--entry-naming", "--env", "--external", "--footer",
    "--format", "--outdir", "--outfile", "--packages",
    "--public-path", "--root", "--sourcemap", "--target",
    "--windows-icon",
    "-e",
]

[[command.sub]]
name = "test"
level = "SafeRead"
standalone = ["--bail", "--help", "--only", "--rerun-each", "--todo", "-h"]
valued = ["--preload", "--timeout", "-t"]

[[command.sub]]
name = "outdated"
standalone = ["--help", "-h"]

[[command.sub]]
name = "pm"
[[command.sub.sub]]
name = "bin"
standalone = ["--help", "-h"]
[[command.sub.sub]]
name = "cache"
standalone = ["--help", "-h"]
[[command.sub.sub]]
name = "hash"
standalone = ["--help", "-h"]
[[command.sub.sub]]
name = "ls"
standalone = ["--help", "-h"]

[[command.sub]]
name = "x"
handler = "bun_x"