Exclude home subdirs from isRootHomeOrSystemPath

[vivienm]

Hi, I'm trying to use this package on Bluefin (Fedora Silverblue-based, with HOME under /var, e.g. /var/home/jdoe) and I'm hitting an over-broad hard-deny.

When the agent runs a recursive rm on any path under the user's home (e.g. rm -rf /var/home/jdoe/projects/foobar/build), isRootHomeOrSystemPath in extensions/auto-mode/hard-deny.ts returns true and the command is unconditionally denied with "irreversible deletion of home/root/system paths is hard-denied".

pi-automode/extensions/auto-mode/hard-deny.ts

Lines 159 to 178 in 87c047b

	function isRootHomeOrSystemPath(path: string): boolean {
	const systemRoots = [
	"/bin",
	"/boot",
	"/dev",
	"/etc",
	"/lib",
	"/lib64",
	"/private",
	"/sbin",
	"/sys",
	"/usr",
	"/var",
	];
	return (
	path === "/" ||
	path === HOME ||
	systemRoots.some((root) => path === root || path.startsWith(`${root}/`))
	);
	}

The path === HOME check is correct. The over-match comes from the system-roots branch: /var is in systemRoots, and path.startsWith("/var/") swallows the whole HOME subtree on distros where HOME lives under /var.

The PR implements a minimal fix: exempt HOME's own subtree before checking system roots. This preserves path === HOME (still blocks rm -rf ~), keeps /var/log, /etc, etc. protected, and only stops the rule from swallowing ~/... on /var/home distros.