safe-chains 0.136.1

Auto-allow safe bash commands in agentic coding tools
Documentation
[[command]]
name = "coverage"
description = "Code coverage measurement tool for Python. coverage run executes an arbitrary Python program while tracing which lines are hit, so it inherits all the safety characteristics of the program being measured. coverage report reads the .coverage data file and prints a text summary (read-only). coverage json and coverage html write report files to disk. coverage combine merges multiple .coverage data files into one, modifying the data file on disk. Does not make network requests. Mature, stable project with regular releases."
url = "https://coverage.readthedocs.io/"
bare_flags = ["--help", "--version", "-h"]

[[command.sub]]
name = "report"
standalone = ["--help", "--ignore-errors", "--include", "--no-skip-covered", "--omit", "--show-missing", "--skip-covered", "--skip-empty", "-h", "-m"]
valued = ["--data-file", "--fail-under", "--precision", "--sort"]

[[command.sub]]
name = "json"
level = "SafeWrite"
standalone = ["--help", "--ignore-errors", "--include", "--omit", "--pretty-print", "-h"]
valued = ["--data-file", "--fail-under", "-o"]

[[command.sub]]
name = "html"
level = "SafeWrite"
standalone = ["--help", "--ignore-errors", "--include", "--omit", "--show-contexts", "--skip-covered", "--skip-empty", "-h"]
valued = ["--data-file", "--directory", "--fail-under", "--precision", "--title", "-d"]

[[command.sub]]
name = "run"
level = "SafeRead"
positional_style = true
standalone = ["--append", "--branch", "--concurrency", "--help", "--parallel", "--source", "--timid", "-a", "-h", "-p"]
valued = ["--context", "--data-file", "--include", "--omit", "--rcfile", "--source"]

[[command.sub]]
name = "combine"
level = "SafeWrite"
standalone = ["--append", "--help", "--keep", "-a", "-h"]
valued = ["--data-file"]