https://github.com/ldayton/dippy
🐤 Less permission fatigue, more momentum. Dippy knows what’s safe to run and keeps Claude on track when plans change.
https://github.com/ldayton/dippy
bash claude-code cli hook permissions python
Last synced: 16 days ago
JSON representation
🐤 Less permission fatigue, more momentum. Dippy knows what’s safe to run and keeps Claude on track when plans change.
- Host: GitHub
- URL: https://github.com/ldayton/dippy
- Owner: ldayton
- License: mit
- Created: 2026-01-07T15:14:10.000Z (about 1 month ago)
- Default Branch: main
- Last Pushed: 2026-01-22T21:22:50.000Z (25 days ago)
- Last Synced: 2026-01-23T01:21:18.164Z (25 days ago)
- Topics: bash, claude-code, cli, hook, permissions, python
- Language: Python
- Homepage:
- Size: 1.37 MB
- Stars: 8
- Watchers: 0
- Forks: 3
- Open Issues: 6
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Security: docs/security-model.md
Awesome Lists containing this project
README
🐤 Dippy
Because ls shouldn't need approval
---
> **Stop the permission fatigue.** Claude Code asks for approval on every `ls`, `git status`, and `cat` - destroying your flow state. You check Slack, come back, and your assistant's just sitting there waiting.
Dippy is a shell command hook that auto-approves safe commands while still prompting for anything destructive. When it blocks, your custom deny messages can steer Claude back on track—no wasted turns. Get up to **40% faster development** without disabling permissions entirely.
Built on [Parable](https://github.com/ldayton/Parable), our own hand-written bash parser—no external dependencies, just pure Python. 14,000+ tests between the two.
***Example: rejecting unsafe operation in a chain***
***Example: rejecting a command with advice, so Claude can keep going***
## ✅ What gets approved
- **Complex pipelines**: `ps aux | grep python | awk '{print $2}' | head -10`
- **Chained reads**: `git status && git log --oneline -5 && git diff --stat`
- **Cloud inspection**: `aws ec2 describe-instances --filters "Name=tag:Environment,Values=prod"`
- **Container debugging**: `docker logs --tail 100 api-server 2>&1 | grep ERROR`
- **Safe redirects**: `grep -r "TODO" src/ 2>/dev/null`, `ls &>/dev/null`
- **Command substitution**: `ls $(pwd)`, `git diff foo-$(date).txt`
## 🚫 What gets blocked
- **Subshell injection**: `git $(echo rm) foo.txt`, `echo $(rm -rf /)`
- **Subtle file writes**: `curl https://example.com > script.sh`, `tee output.log`
- **Hidden mutations**: `git stash drop`, `npm unpublish`, `brew unlink`
- **Cloud danger**: `aws s3 rm s3://bucket --recursive`, `kubectl delete pod`
- **Destructive chains**: `rm -rf node_modules && npm install` (blocks the whole thing)
---
## Installation
### Homebrew (recommended)
```bash
brew tap ldayton/dippy
brew install dippy
```
### Manual
```bash
git clone https://github.com/ldayton/Dippy.git
```
### Configure
Add to `~/.claude/settings.json` (or use `/hooks` interactively):
```json
{
"hooks": {
"PreToolUse": [
{
"matcher": "Bash",
"hooks": [{ "type": "command", "command": "dippy" }]
}
]
}
}
```
If you installed manually, use the full path instead: `/path/to/Dippy/bin/dippy-hook`
---
## Configuration
Dippy is highly customizable. Beyond simple allow/deny rules, you can attach messages that steer the AI back on track when it goes astray—no wasted turns.
```
deny python "Use uv run python, which runs in project environment"
deny rm -rf "Use trash instead"
deny-redirect **/.env* "Never write secrets, ask me to do it"
```
Dippy reads config from `~/.dippy/config` (global) and `.dippy` in your project root.
**Full documentation:** [Dippy Wiki](https://github.com/ldayton/Dippy/wiki)
---
## Extensions
Dippy can do more than filter shell commands. See the [wiki](https://github.com/ldayton/Dippy/wiki) for additional capabilities.
---
## Uninstall
Remove the hook entry from `~/.claude/settings.json`, then:
```bash
brew uninstall dippy # if installed via Homebrew
```