safe-chains 0.222.0

Auto-allow safe bash commands in agentic coding tools
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60

[[command]]
name = "vite"
description = "Frontend build tool. `build` writes production assets to dist/ (project-local SafeWrite). `preview` serves the build output for local inspection (network listener). `dev`/`serve` run the dev server with HMR — both load the user's vite.config.{js,ts} which is arbitrary JS executed at startup. `optimize` rewrites the dependency cache. Active project."
url = "https://vite.dev/"
researched_version = "vite 5.x"
bare_flags = ["--help", "--version", "-h", "-v"]

[command.wrapper]
standalone = ["--clearScreen", "--debug", "--filter", "--force", "--profile", "-d", "-f"]
valued = ["--base", "--config", "--logLevel", "--mode", "-c", "-l", "-m"]

# A vite config is JavaScript that vite EVALUATES, so `--config`/`-c` select code to run rather
# than data to read.
[command.path_gate]
flags = { "--config" = "exec", "-c" = "exec" }

[[command.sub]]
name = "build"
level = "SafeWrite"
bare = true
standalone = [
    "--app", "--emptyOutDir", "--help",
    "--manifest", "--minify", "--no-watch",
    "--sourcemap", "--ssr",
    "--ssrManifest", "--watch", "--write",
    "-h", "-w",
]
valued = [
    "--assetsDir", "--assetsInlineLimit",
    "--outDir", "--target",
]

[[command.sub]]
name = "preview"
level = "SafeRead"
bare = true
standalone = [
    "--cors", "--help", "--https",
    "--open", "--strictPort",
    "-h",
]
valued = ["--host", "--port"]

[[command.sub]]
name = "optimize"
level = "SafeWrite"
bare = true
standalone = ["--force", "--help", "-h"]

[[command.sub]]
name = "help"
allow_all = true

[[command.sub]]
name = "dev"
candidate = true

[[command.sub]]
name = "serve"
candidate = true