feat: broaden safe pipe whitelist in gh permission hook (#2581)

.claude/hooks/gh-permission-hook.py

@@ -34,8 +34,7 @@ ALLOWED (auto-approved):
    - Mutations: resolveReviewThread, unresolveReviewThread
    - Mutations: addPullRequestReview, addPullRequestReviewComment
 
-6. Piping to safe text-processing commands:
-   - jq, head, tail, grep, wc, sort, uniq, cut, tr
+6. Piping gh output to safe text-processing commands.
 
 BLOCKED (denied):
 -----------------
@@ -128,17 +127,16 @@ MARKDOWN_CODE_SPAN_PATTERN = re.compile(r'`[\w.-]*[._-][\w.-]*`')
 # Pattern to match double-quoted strings (for processing)
 DOUBLE_QUOTED_STRING_PATTERN = re.compile(r'"[^"]*"')
 
-# Safe pipe destinations - commands that only process text output
-# These are safe because they can't execute arbitrary code from piped input
-# jq: JSON processor, commonly used with gh api output
-# head/tail: display first/last N lines
-# grep: pattern search (cannot execute code from input)
-# wc: word/line/character count
-# sort/uniq: sort and deduplicate lines
-# cut: extract fields from lines
-# tr: character translation
-# Note: less/more are NOT included because they support shell escapes (e.g., !cmd)
-SAFE_PIPE_PATTERN = re.compile(r'\|\s*(jq|head|tail|grep|wc|sort|uniq|cut|tr)\b')
+# Safe pipe destinations - broad whitelist of common text-processing commands
+# Claude Code's own permission system provides the primary security layer
+SAFE_PIPE_PATTERN = re.compile(
+    r'\|\s*('
+    r'jq|head|tail|grep|egrep|fgrep|wc|sort|uniq|cut|tr'
+    r'|base64|cat|column|fmt|fold|paste'
+    r'|expand|unexpand|rev|tac|nl|od|xxd|hexdump|strings'
+    r'|md5sum|sha256sum|sha1sum|shasum|cksum'
+    r')\b'
+)
 
 # Safe redirect patterns - common shell redirects that don't execute commands
 # 2>&1: redirect stderr to stdout (very common for capturing all output)

rules/git-workflow.md

@@ -23,3 +23,11 @@ When running GitHub Actions with `pull_request_target` on cross-repo PRs (from f
 - To rebase onto the base repo's main, you must add an `upstream` remote: `git remote add upstream https://github.com/<base-repo>.git`
 - Remote setup for cross-repo PRs: `origin` → fork (push here), `upstream` → base repo (rebase from here)
 - The `GITHUB_TOKEN` can push to the fork if the PR author enabled "Allow edits from maintainers"
+
+## Adding labels to PRs
+
+`gh pr edit --add-label` fails with a GraphQL "Projects (classic)" deprecation error on repos that had classic projects. Use the REST API instead:
+
+```bash
+gh api repos/dyad-sh/dyad/issues/{PR_NUMBER}/labels -f "labels[]=label-name"
+```