safe-chains releases
← Back to safe-chains · RSS
-
- feat *(rake)* Allow known-safe Rails ecosystem tasks
- feat Add sfltool (read-only subs)
- other Prose pass on security/how-it-works/custom-commands
- other *(claude.md)* Keep obsolete-but-safe entries policy
-
- feat Add git symbolic-ref (read forms only)
-
- feat *(dispatch)* Accept short-flag clusters and bare-flag/wrapper interleave
- feat Add toolbox
-
- other Ssh auth-probe -o allowlist + accept combined short/no-space forms
-
- feat Refresh overmind flag surface; add help sub
- feat Add subcontract (pitluga/subcontractor) wrapper command
- feat Refresh rspec flag surface against rspec-core upstream
- feat Add mktemp (local temp-file creation)
- feat Add mkdir (local directory creation)
- feat Add ssh -G and -Q (local-only inspection, no network)
- feat Add ssh auth-probe handler (ssh -T -o BatchMode=yes <host>)
- feat Add rm (--help and --version only)
- feat Parse bash [[ ... ]] test construct
-
- feat Add tofu (OpenTofu) safe-command surface
-
- fix Render nested sub-bullets correctly in handler docs
- other Remove dead handler_data field + handler_word_list accessor
- other Drop no-op forges dispatch chain
-
- feat [[command.matrix]] primitive — handlers self-describe their sub × action dispatch
- feat [[command.sub]] policy = "key" + collapse gh/glab handlers to ~10 lines
- other Gh handler — data in TOML via new handler_policy schema
- other Glab handler — data in TOML using the gh handler_policy schema
- other Reader-friendly auto-render for handler-using commands
-
- other Extract tilt grammar data into TOML, reduce handler to pure dispatch
- other Sysctl handler — data in TOML, logic in Rust (4 lines)
- other Magick handler — data in TOML, logic in Rust
- other Php handler — partial data migration; ini directives stay as documented exception
- other Auto-render [[command.sub]] and [command.fallback] data for handler-using commands
- other Regenerate COMMANDS.md and book to include delegate sub rendering
-
- fix Tilt disambiguation, audit safety fixes, positional_style split, and audit-driven downgrade