safe-chains 0.184.0

Auto-allow safe bash commands in agentic coding tools
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117

[[command]]
name = "dbt"
description = "Data build tool — manages SQL transformations. `compile`, `parse`, `ls/list`, `docs generate`, `debug`, `version`, `init` are read-only or scaffolding. `run`, `seed`, `snapshot`, `test`, `build`, `freshness`, `source`, `clean`, `deps`, `docs serve`, `clone` execute SQL against the configured database (external system writes). Carve-out covers diagnostic / read-only forms."
url = "https://docs.getdbt.com/reference/dbt-commands"
researched_version = "dbt-core 1.x"
bare_flags = ["--help", "--version", "-h", "-V"]

[[command.sub]]
name = "version"
standalone = ["--help", "-h"]

[[command.sub]]
name = "debug"
level = "SafeRead"
bare = true
standalone = ["--config-dir", "--connection", "--help", "--no-version-check", "--quiet", "--version-check", "-h", "-q"]
valued = ["--profile", "--project-dir", "--profiles-dir", "--target", "-t"]

[[command.sub]]
name = "compile"
level = "SafeRead"
bare = true
standalone = ["--cache-selected-only", "--debug", "--exclude-resource-type", "--full-refresh", "--help", "--inline", "--no-cache-selected-only", "--no-defer", "--no-favor-state", "--no-full-refresh", "--no-introspect", "--no-partial-parse", "--no-populate-cache", "--no-print", "--no-static-parser", "--no-version-check", "--profile", "--profiles-dir", "--quiet", "--show", "--target", "--target-path", "--threads", "--vars", "--warn-error", "-h", "-q"]
valued = ["--exclude", "--inline", "--profile", "--profiles-dir", "--project-dir", "--resource-type", "--select", "--state", "--target", "--target-path", "--threads", "--vars", "-d", "-m", "-s", "-t"]

[[command.sub]]
name = "parse"
level = "SafeRead"
bare = true
standalone = ["--help", "--no-partial-parse", "--no-static-parser", "--no-version-check", "--quiet", "--show-hash", "--write-json", "-h", "-q"]
valued = ["--profile", "--profiles-dir", "--project-dir", "--target", "--target-path", "--threads", "--vars", "-t"]

[[command.sub]]
name = "ls"
level = "SafeRead"
bare = true
standalone = ["--help", "--no-version-check", "--quiet", "--resource-type", "-h", "-q"]
valued = ["--exclude", "--exclude-resource-type", "--output", "--output-keys", "--profile", "--profiles-dir", "--project-dir", "--resource-type", "--select", "--state", "--target", "-d", "-m", "-s", "-t"]

[[command.sub]]
name = "list"
level = "SafeRead"
bare = true
standalone = ["--help", "--no-version-check", "--quiet", "-h", "-q"]
valued = ["--exclude", "--output", "--output-keys", "--profile", "--profiles-dir", "--project-dir", "--resource-type", "--select", "--state", "--target", "-d", "-m", "-s", "-t"]

[[command.sub]]
name = "init"
level = "SafeWrite"
bare = true
standalone = ["--help", "--profiles-dir", "--quiet", "--skip-profile-setup", "-h", "-q", "-s"]

[[command.sub]]
name = "deps"
level = "SafeWrite"
bare = true
standalone = ["--add-package", "--dry-run", "--help", "--lock", "--no-lock", "--quiet", "--upgrade", "-h", "-q"]
valued = ["--profile", "--profiles-dir", "--project-dir", "--source", "--target", "--vars", "-t"]

[[command.sub]]
name = "clean"
level = "SafeWrite"
bare = true
standalone = ["--help", "--no-clean-project-files-only", "--profile", "--quiet", "-h", "-q"]
valued = ["--profile", "--profiles-dir", "--project-dir", "--target"]

[[command.sub]]
name = "help"
allow_all = true

[[command.sub]]
name = "run"
candidate = true

[[command.sub]]
name = "test"
candidate = true

[[command.sub]]
name = "seed"
candidate = true

[[command.sub]]
name = "snapshot"
candidate = true

[[command.sub]]
name = "build"
candidate = true

[[command.sub]]
name = "freshness"
candidate = true

[[command.sub]]
name = "source"
candidate = true

[[command.sub]]
name = "docs"
candidate = true

[[command.sub]]
name = "clone"
candidate = true

[[command.sub]]
name = "run-operation"
candidate = true

[[command.sub]]
name = "show"
candidate = true

[[command.sub]]
name = "retry"
candidate = true