safe-chains 0.167.0

Auto-allow safe bash commands in agentic coding tools
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102

[[command]]
name = "rbenv"
description = "Ruby version manager that selects which Ruby installation under ~/.rbenv/versions/ is active per directory, shell, or globally via shim wrappers on PATH. The covered read-only subcommands (versions, version, version-name, version-file, version-origin, which, whence, prefix, root, shims, hooks, completions) inspect local state without modifying anything. SafeWrite subcommands operate entirely on local files: install (downloads ruby source via the ruby-build plugin and compiles it under ~/.rbenv/versions; running build scripts under the user-trusted-environment model, same posture as bundle install running gem postinstall), uninstall (removes a version directory), local (writes .ruby-version in cwd), global (writes ~/.rbenv/version), shell (sets the RBENV_VERSION env var — only meaningful when invoked through the rbenv() shell function), and rehash (regenerates shim files). The init subcommand emits shell init code and is left out of coverage; users typically run it once during install. No remote service interaction beyond the source-tarball download performed by ruby-build during install."
url = "https://github.com/rbenv/rbenv#readme"
researched_version = "v1.3.2 (January 2026); ruby-build 20260503"
bare_flags = ["--help", "--version", "-V", "-h"]

[[command.sub]]
name = "help"
standalone = ["--help", "-h"]

[[command.sub]]
name = "root"
standalone = ["--help", "-h"]

[[command.sub]]
name = "shims"
standalone = ["--help", "-h"]

[[command.sub]]
name = "version"
standalone = ["--help", "-h"]

[[command.sub]]
name = "versions"
standalone = ["--bare", "--help", "-h"]

[[command.sub]]
name = "which"
bare = false
standalone = ["--help", "-h"]

[[command.sub]]
name = "whence"
bare = false
standalone = ["--help", "-h"]

[[command.sub]]
name = "prefix"
standalone = ["--help", "-h"]

[[command.sub]]
name = "hooks"
bare = false
standalone = ["--help", "-h"]

[[command.sub]]
name = "version-name"
standalone = ["--help", "-h"]

[[command.sub]]
name = "version-file"
standalone = ["--help", "-h"]

[[command.sub]]
name = "version-origin"
standalone = ["--help", "-h"]

[[command.sub]]
name = "completions"
bare = false
standalone = ["--help", "-h"]

[[command.sub]]
name = "install"
level = "SafeWrite"
standalone = [
    "--force", "--help", "--keep", "--list", "--list-all", "--patch",
    "--skip-existing", "--verbose", "--version",
    "-L", "-f", "-h", "-k", "-l", "-p", "-s", "-v",
]

[[command.sub]]
name = "uninstall"
level = "SafeWrite"
bare = false
standalone = ["--force", "--help", "-f", "-h"]

[[command.sub]]
name = "local"
level = "SafeWrite"
standalone = ["--help", "--unset", "-h"]

[[command.sub]]
name = "global"
level = "SafeWrite"
bare = false
standalone = ["--help", "-h"]

[[command.sub]]
name = "shell"
level = "SafeWrite"
standalone = ["--help", "--unset", "-h"]

[[command.sub]]
name = "rehash"
level = "SafeWrite"
standalone = ["--help", "-h"]

[[command.sub]]
name = "init"
candidate = true