safe-chains 0.215.0

Auto-allow safe bash commands in agentic coding tools
Documentation
[[command]]
name = "echo"
aliases = ["gecho"]
description = "Prints arguments to stdout. Completely inert — no flags cause side effects. The only consideration is output redirection, which is handled by the redirect system, not by echo itself."
url = "https://www.gnu.org/software/coreutils/manual/coreutils.html#echo-invocation"
level = "Inert"
bare = true
tolerate_unknown_short = true
tolerate_unknown_long = true
standalone = ["-E", "-e", "-n"]
examples_safe = ["echo hello world", "echo -n done"]

# Declarative facet behavior: echo OBSERVES nothing on the filesystem — it prints its literal
# arguments to stdout (which reaches the model), touching no file, network, process, or secret.
# A none-role emitter: its `-n`/`-e`/`-E` flags only format the output, and any other argument is
# just printed. Redirection (`echo x > f`) is a separate capability the enclosing CST resolves.
# Replaces `resolve_echo`.
[command.behavior]
operation = "observe"
positionals = "none"