safe-chains 0.192.0

Auto-allow safe bash commands in agentic coding tools
Documentation
[[command]]
name = "dvipdf"
description = "Ghostscript wrapper script. Converts a TeX DVI file to PDF by piping dvips output into gs with -sDEVICE=pdfwrite. Reads the input DVI; writes the output PDF to the second positional argument (defaults to input basename with .pdf). Forwards any -X flags directly to gs. Ghostscript releases roughly once a year; the wrapper script surface has been stable for decades."
url = "https://ghostscript.readthedocs.io/en/latest/"
researched_version = "Ghostscript 10.04.0 (Sept 2024)"
level = "SafeWrite"
bare = false
tolerate_unknown_short = true
standalone = ["--help", "-h", "-?"]

[[command]]
name = "eps2eps"
description = "Ghostscript wrapper script. Runs gs with -sDEVICE=eps2write to produce a normalized Encapsulated PostScript file from a PostScript, EPS, or PDF input. Reads the first positional argument; writes the resulting EPS to the second positional argument. Forwards any -X flags directly to gs. Ghostscript releases roughly once a year; the wrapper script surface has been stable for decades."
url = "https://ghostscript.readthedocs.io/en/latest/"
researched_version = "Ghostscript 10.04.0 (Sept 2024)"
level = "SafeWrite"
bare = false
tolerate_unknown_short = true
standalone = ["--help", "-h", "-?"]

[[command]]
name = "gsnd"
description = "Ghostscript wrapper script. Invokes gs with -dSAFER -dNODISPLAY followed by any user arguments. Used to run PostScript programs without rendering a display device. Effects depend entirely on the forwarded gs arguments, which can include -sOutputFile= to write converted output. Treated at the write level for the same reason gs itself is. Ghostscript releases roughly once a year; the wrapper script surface has been stable for decades."
url = "https://ghostscript.readthedocs.io/en/latest/"
researched_version = "Ghostscript 10.04.0 (Sept 2024)"
level = "SafeWrite"
bare = false
tolerate_unknown_short = true
standalone = ["--help", "-h", "-?"]

[[command]]
name = "pdf2ps"
description = "Ghostscript wrapper script. Runs gs with -sDEVICE=ps2write to convert a PDF to PostScript. Reads input.pdf positional; writes output.ps to the second positional (defaults to input basename with .ps). The -dLanguageLevel=1|2|3 flag controls the PostScript level of the output. Forwards any -X flags directly to gs. Ghostscript releases roughly once a year; the wrapper script surface has been stable for decades."
url = "https://ghostscript.readthedocs.io/en/latest/"
researched_version = "Ghostscript 10.04.0 (Sept 2024)"
level = "SafeWrite"
bare = false
tolerate_unknown_short = true
standalone = ["--help", "-h", "-?"]

[[command]]
name = "pf2afm"
description = "Ghostscript wrapper script. Runs gs in non-display mode against the bundled pf2afm.ps to generate an AFM (Adobe Font Metrics) file from a PostScript font file (.pfb, .pfa, or .pfm). Reads the named font file; writes the AFM file next to it (refuses to overwrite an existing .afm). The wrapper takes no flags of its own. Ghostscript releases roughly once a year; the wrapper script surface has been stable for decades."
url = "https://ghostscript.readthedocs.io/en/latest/"
researched_version = "Ghostscript 10.04.0 (Sept 2024)"
level = "SafeWrite"
bare = false
max_positional = 1

[[command]]
name = "pfbtopfa"
description = "Ghostscript wrapper script. Runs gs in non-display mode against the bundled pfbtopfa.ps to convert a binary PostScript Type 1 font (.pfb) into the ASCII .pfa form. Reads input.pfb; writes output.pfa to the second positional (defaults to input basename with .pfa). The wrapper takes no flags of its own. Ghostscript releases roughly once a year; the wrapper script surface has been stable for decades."
url = "https://ghostscript.readthedocs.io/en/latest/"
researched_version = "Ghostscript 10.04.0 (Sept 2024)"
level = "SafeWrite"
bare = false
max_positional = 2

[[command]]
name = "printafm"
description = "Ghostscript wrapper script. Runs gs in non-display mode against the bundled printafm.ps to print Adobe Font Metrics for a named PostScript font to stdout. Reads font definition files from the gs search path; produces no output file. The wrapper takes no flags of its own. Ghostscript releases roughly once a year; the wrapper script surface has been stable for decades."
url = "https://ghostscript.readthedocs.io/en/latest/"
researched_version = "Ghostscript 10.04.0 (Sept 2024)"
level = "Inert"
bare = false
max_positional = 1

[[command]]
name = "ps2ascii"
description = "Ghostscript wrapper script. Runs gs with -sDEVICE=txtwrite to extract text from a PostScript or PDF document. Reads the first positional argument (or stdin); writes text to the second positional (or stdout when only one positional is given, or when invoked as a stdin filter). Supports Unicode extraction. The wrapper takes no flags of its own. Ghostscript releases roughly once a year; the wrapper script surface has been stable for decades."
url = "https://ghostscript.readthedocs.io/en/latest/"
researched_version = "Ghostscript 10.04.0 (Sept 2024)"
level = "SafeWrite"
bare = true
max_positional = 2

[[command]]
name = "ps2epsi"
description = "Ghostscript wrapper script. Runs gs against the bundled ps2epsi.ps to generate an EPSI (Encapsulated PostScript with a preview bitmap) file from a PostScript input. Reads infile.ps; writes the EPSI file to the second positional (defaults to input basename with .epsi). The wrapper takes no flags of its own. Ghostscript releases roughly once a year; the wrapper script surface has been stable for decades."
url = "https://ghostscript.readthedocs.io/en/latest/"
researched_version = "Ghostscript 10.04.0 (Sept 2024)"
level = "SafeWrite"
bare = false
max_positional = 2

[[command]]
name = "ps2pdfwr"
description = "Ghostscript wrapper script. Runs gs with -sDEVICE=pdfwrite to convert PostScript to PDF without forcing a CompatibilityLevel. The version-specific ps2pdf/ps2pdf12/ps2pdf13/ps2pdf14 wrappers all delegate here after adding their own compatibility flag. Reads input.[e]ps (or stdin via `-`); writes output.pdf to the second positional (or stdout via `-`). Forwards any -X flags directly to gs. Ghostscript releases roughly once a year; the wrapper script surface has been stable for decades."
url = "https://ghostscript.readthedocs.io/en/latest/"
researched_version = "Ghostscript 10.04.0 (Sept 2024)"
level = "SafeWrite"
bare = false
tolerate_unknown_short = true
standalone = ["--help", "-h", "-?"]

[[command]]
name = "ps2ps"
description = "Ghostscript wrapper script. Runs gs with -sDEVICE=ps2write to rewrite a PostScript or PDF input as a normalized level-2 DSC 3.0 conforming PostScript file. Reads the first positional; writes the second positional. Forwards any -X flags directly to gs. Ghostscript releases roughly once a year; the wrapper script surface has been stable for decades."
url = "https://ghostscript.readthedocs.io/en/latest/"
researched_version = "Ghostscript 10.04.0 (Sept 2024)"
level = "SafeWrite"
bare = false
tolerate_unknown_short = true
standalone = ["--help", "-h", "-?"]