safe-chains 0.167.0

Auto-allow safe bash commands in agentic coding tools
Documentation
[[command]]
name = "ruff"
description = "Extremely fast Python linter and formatter written in Rust, 10-100x faster than Flake8/Black. ruff check performs static analysis and reports violations without modifying files (--fix is opt-in and not exposed here). ruff format --check only reports unformatted files without rewriting them. Does not import or execute Python code. Very actively developed with weekly releases."
url = "https://docs.astral.sh/ruff/"
bare_flags = ["--help", "--version", "-V", "-h"]

[[command.sub]]
name = "check"
level = "SafeRead"
standalone = [
    "--help", "--no-fix", "--quiet", "--show-files",
    "--show-settings", "--statistics", "--verbose",
    "--watch",
    "-e", "-h", "-q", "-v",
]
valued = [
    "--config", "--exclude", "--extend-exclude",
    "--extend-select", "--ignore", "--line-length",
    "--output-format", "--select", "--target-version",
]

[[command.sub]]
name = "format"
guard = "--check"
level = "Inert"
bare = false
standalone = ["--check", "--diff", "--help", "--quiet", "--verbose", "-h", "-q", "-v"]
valued = [
    "--config", "--exclude", "--extend-exclude",
    "--line-length", "--target-version",
]

[[command.sub]]
name = "rule"
standalone = ["--all", "--help", "--output-format", "-h"]

[[command.sub]]
name = "version"
standalone = ["--help", "--output-format", "-h"]

[[command.sub]]
name = "config"
standalone = ["--help", "-h"]