@ssweens/pi-huddle 1.0.0 → 1.0.1

package/README.md

@@ -188,6 +188,8 @@ Enter to select · Tab/↑↓ to navigate · Esc to cancel
 `cat`, `head`, `tail`, `grep`, `find`, `rg`, `fd`, `ls`, `pwd`, `tree`,
 `git status`, `git log`, `git diff`, `git branch`, `npm list`, `curl`, `jq`
 
+Benign output redirections like `2>/dev/null` and `2>&1` are also allowed.
+
 ### Blocked Bash Commands (Prompt Required)
 
 `rm`, `mv`, `cp`, `mkdir`, `touch`, `git add`, `git commit`, `git push`,

package/extensions/index.ts

@@ -52,7 +52,7 @@ export default function huddleExtension(pi: ExtensionAPI): void {
 
 		if (huddleEnabled) {
 			pi.setActiveTools(HUDDLE_MODE_TOOLS);
-			ctx.ui.notify(`Huddle mode enabled. Tools: ${HUDDLE_MODE_TOOLS.join(", ")}. Safe: cd, rg, fd, cat, git status/log/diff`);
+			ctx.ui.notify(`Huddle mode enabled. Tools: ${HUDDLE_MODE_TOOLS.join(", ")}. Safe: cd, rg, fd, head, tail, cat, grep, find, git status/log/diff`);
 		} else {
 			pi.setActiveTools(NORMAL_MODE_TOOLS);
 			ctx.ui.notify("Huddle mode disabled. Full access restored.");

package/extensions/lib/utils.ts

@@ -95,6 +95,22 @@ const SAFE_PATTERNS = [
 	/^\s*exa\b/,
 ];
 
+// Redirections that are safe in read-only huddle mode (suppress output only)
+const SAFE_REDIRECTION_PATTERNS = [
+	/\b\d*>\s*\/dev\/null\b/g,
+	/\b\d*>>\s*\/dev\/null\b/g,
+	/\b\d*>\s*&\d+\b/g,
+	/\b\d*>>\s*&\d+\b/g,
+];
+
+function stripSafeRedirections(command: string): string {
+	let sanitized = command;
+	for (const pattern of SAFE_REDIRECTION_PATTERNS) {
+		sanitized = sanitized.replace(pattern, "");
+	}
+	return sanitized;
+}
+
 /**
  * Split command into parts respecting quoted strings.
  * Handles: &&, ;, | (but not inside quotes)
@@ -146,8 +162,11 @@ function splitCommandRespectingQuotes(command: string): string[] {
 }
 
 export function isSafeCommand(command: string): boolean {
+	// Allow benign output-suppression redirections before destructive checks.
+	const commandForDestructiveCheck = stripSafeRedirections(command);
+
 	// Check for destructive patterns anywhere in the command
-	const isDestructive = DESTRUCTIVE_PATTERNS.some((p) => p.test(command));
+	const isDestructive = DESTRUCTIVE_PATTERNS.some((p) => p.test(commandForDestructiveCheck));
 	if (isDestructive) return false;
 
 	// Split compound commands and check each part

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ssweens/pi-huddle",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "type": "module",
   "description": "Huddle mode for pi - safe exploration and structured elicitation before execution",
   "keywords": [

package/skills/huddle/SKILL.md

@@ -153,7 +153,7 @@ The `ask_user` tool is available in **both huddle mode and normal mode**. It pre
 - Git writes: `git add`, `git commit`, `git push`
 - Package installs: `npm install`, `yarn add`, `pip install`
 - System: `sudo`, `kill`, `reboot`
-- Redirections: `>`, `>>`
+- Redirections: `>`, `>>` (except benign output suppression like `2>/dev/null` or `2>&1`)
 
 ## Tips