safe-chains 0.136.0

Auto-allow safe bash commands in agentic coding tools
Documentation
[[command]]
name = "deno"
description = "Secure JavaScript/TypeScript runtime with a granular permissions model. deno check and deno lint perform static analysis without executing user code. deno doc and deno info are read-only introspection commands. deno fmt with --check only reports formatting issues without modifying files. deno test executes test code but Deno's permission sandbox limits filesystem, network, and subprocess access by default. Actively developed with minor releases every few weeks."
url = "https://docs.deno.com/runtime/reference/cli/"
bare_flags = ["--help", "--version", "-V", "-h"]

[[command.sub]]
name = "check"
level = "SafeRead"
standalone = ["--help", "--json", "--no-lock", "--quiet", "--unstable", "-h", "-q"]
valued = ["--config", "--import-map", "-c"]

[[command.sub]]
name = "doc"
level = "Inert"
standalone = ["--help", "--json", "--no-lock", "--quiet", "--unstable", "-h", "-q"]
valued = ["--config", "--import-map", "-c"]

[[command.sub]]
name = "fmt"
guard = "--check"
level = "Inert"
bare = false
standalone = ["--check", "--help", "--no-semicolons", "--single-quote", "--unstable", "-h", "-q"]
valued = ["--config", "--ext", "--ignore", "--indent-width", "--line-width", "--log-level", "--prose-wrap", "-c"]

[[command.sub]]
name = "info"
level = "Inert"
standalone = ["--help", "--json", "--no-lock", "--quiet", "--unstable", "-h", "-q"]
valued = ["--config", "--import-map", "-c"]

[[command.sub]]
name = "lint"
level = "SafeRead"
standalone = ["--help", "--json", "--no-lock", "--quiet", "--unstable", "-h", "-q"]
valued = ["--config", "--import-map", "-c"]

[[command.sub]]
name = "test"
level = "SafeRead"
standalone = ["--help", "--json", "--no-lock", "--quiet", "--unstable", "-h", "-q"]
valued = ["--config", "--import-map", "-c"]