@bacnh85/pi-plan 0.1.8 → 0.1.9

package/index.ts

@@ -181,6 +181,26 @@ function tokenizeSimpleCommand(command: string): string[] | undefined {
 	return trimmed.split(/\s+/).filter(Boolean);
 }
 
+function sanitizeCommand(command: string): string[] {
+	let sanitized = command;
+
+	// Strip /dev/null redirects: 2>/dev/null, >/dev/null, >>/dev/null, &>/dev/null
+	sanitized = sanitized.replace(/\d*>>?\s*\/dev\/null/g, "");
+	sanitized = sanitized.replace(/&>\s*\/dev\/null/g, "");
+	// Strip fd redirections: 2>&1, 1>&2, etc.
+	sanitized = sanitized.replace(/\s*\d*>&\d+\s*/g, " ");
+
+	// Strip cd <path> &&  /  cd <path> ;  prefix
+	sanitized = sanitized.replace(/^cd\s+(?:"[^"]*"|'[^']*'|[^\s;&|]+)\s*(?:&&|;)\s*/i, "").trim();
+
+	// If command contains pipes, split into segments and validate each
+	if (sanitized.includes("|")) {
+		return sanitized.split("|").map((s) => s.trim()).filter(Boolean);
+	}
+
+	return [sanitized.trim()];
+}
+
 function hasOptionValue(tokens: string[], index: number): boolean {
 	return index + 1 < tokens.length && !tokens[index + 1].startsWith("-");
 }
@@ -219,14 +239,19 @@ function isAllowedGitCommand(tokens: string[]): boolean {
 }
 
 export function isReadOnlyBash(command: string): boolean {
-	const tokens = tokenizeSimpleCommand(command);
-	if (!tokens) return false;
-	if (tokens.length === 0) return true;
-	const normalized = tokens[0] === "rtk" ? tokens.slice(1) : tokens;
-	if (normalized.length === 0) return false;
-	if (isAllowedGitCommand(normalized)) return true;
-	if (isAllowedNpmMetadataCommand(normalized)) return true;
-	return /^(rg|grep|find|fd|ls|pwd|cat|head|tail|sed|awk|wc|sort|uniq|cut)$/.test(normalized[0]);
+	const segments = sanitizeCommand(command);
+	if (segments.length === 0) return true;
+
+	return segments.every((segment) => {
+		const tokens = tokenizeSimpleCommand(segment);
+		if (!tokens) return false;
+		if (tokens.length === 0) return true;
+		const normalized = tokens[0] === "rtk" ? tokens.slice(1) : tokens;
+		if (normalized.length === 0) return false;
+		if (isAllowedGitCommand(normalized)) return true;
+		if (isAllowedNpmMetadataCommand(normalized)) return true;
+		return /^(rg|grep|find|fd|ls|pwd|cat|head|tail|sed|awk|wc|sort|uniq|cut|read)$/.test(normalized[0]);
+	});
 }
 
 export default function piPlanExtension(pi: ExtensionAPI): void {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bacnh85/pi-plan",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "Pi extension that adds a plan mode with workspace markdown plans and thinking-level presets.",
   "license": "MIT",
   "publishConfig": {