safe-chains 0.167.0

Auto-allow safe bash commands in agentic coding tools
Documentation
[[command]]
name = "codex"
description = "OpenAI's local coding agent that reads, modifies, and executes code on your machine. Codex runs in Agent mode by default, giving it the ability to read files, write changes, and run shell commands within your project directory. It communicates with OpenAI's API over the network, sending code context with each request. Some subcommands (cloud status/list/diff, review) are read-only, while others (apply, exec, fork, resume) modify local state. The project is under active development with frequent CLI changes."
url = "https://github.com/openai/codex"
bare_flags = ["--help", "--version", "-V", "-h"]
[command.wrapper]
valued = ["--config", "--disable", "--enable", "-c"]

[[command.sub]]
name = "apply"
level = "SafeWrite"
positional_style = true

[[command.sub]]
name = "cloud"
nested_bare = true
[[command.sub.sub]]
name = "apply"
level = "SafeWrite"
positional_style = true
[[command.sub.sub]]
name = "diff"
positional_style = true
[[command.sub.sub]]
name = "list"
positional_style = true
[[command.sub.sub]]
name = "status"
positional_style = true

[[command.sub]]
name = "completion"
standalone = ["--help", "-h"]
valued = ["--shell", "-s"]
max_positional = 0

[[command.sub]]
name = "debug"
nested_bare = true
[[command.sub.sub]]
name = "app-server"
positional_style = true

[[command.sub]]
name = "exec"
level = "SafeWrite"
positional_style = true

[[command.sub]]
name = "features"
nested_bare = true
[[command.sub.sub]]
name = "disable"
level = "SafeWrite"
positional_style = true
[[command.sub.sub]]
name = "enable"
level = "SafeWrite"
positional_style = true
[[command.sub.sub]]
name = "list"
standalone = ["--help", "-h"]
max_positional = 0

[[command.sub]]
name = "fork"
level = "SafeWrite"
positional_style = true

[[command.sub]]
name = "mcp"
nested_bare = true
[[command.sub.sub]]
name = "add"
level = "SafeWrite"
positional_style = true
[[command.sub.sub]]
name = "get"
positional_style = true
[[command.sub.sub]]
name = "list"
positional_style = true
[[command.sub.sub]]
name = "remove"
level = "SafeWrite"
positional_style = true

[[command.sub]]
name = "resume"
level = "SafeWrite"
positional_style = true

[[command.sub]]
name = "review"
positional_style = true

[[command.sub]]
name = "sandbox"
level = "SafeWrite"
positional_style = true