@codyswann/lisa 2.159.9 → 2.161.0

package/plugins/src/harper-fabric/hooks/block-generated-artifact-edits.sh

@@ -0,0 +1,72 @@
+#!/bin/bash
+# This file is managed by Lisa.
+# Do not edit directly - changes will be overwritten on the next `lisa` run.
+
+# PreToolUse hook: block Write/Edit/MultiEdit on generated Harper deploy
+# artifacts. Harper/Fabric projects build these files from TypeScript under
+# src/, so direct edits are overwritten by the next build and usually ship as
+# no-op fixes.
+# Reference: https://docs.claude.com/en/docs/claude-code/hooks
+# Exit code 2 blocks the tool call and surfaces stderr to Claude.
+
+JSON_INPUT=$(cat)
+
+command -v jq >/dev/null 2>&1 || exit 0
+
+FILE_PATH=$(printf '%s' "$JSON_INPUT" | jq -r '.tool_input.file_path // empty')
+[ -n "$FILE_PATH" ] || exit 0
+
+PLUGIN_ROOT=${CLAUDE_PLUGIN_ROOT:-}
+if [ -z "$PLUGIN_ROOT" ]; then
+  PLUGIN_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+fi
+GLOBS_FILE="$PLUGIN_ROOT/generated-artifact-globs.txt"
+[ -f "$GLOBS_FILE" ] || exit 0
+
+normalize_path() {
+  local path="$1"
+  path="${path#./}"
+  printf '%s' "$path"
+}
+
+matches_glob() {
+  local file="$1"
+  local glob="$2"
+
+  if [ "${glob: -3}" = "/**" ]; then
+    local dir="${glob%/**}"
+    case "$file" in
+      "$dir"/* | */"$dir"/*) return 0 ;;
+    esac
+    return 1
+  fi
+
+  case "$file" in
+    $glob | */$glob) return 0 ;;
+  esac
+
+  return 1
+}
+
+NORMALIZED_FILE=$(normalize_path "$FILE_PATH")
+
+while IFS= read -r glob || [ -n "$glob" ]; do
+  [ -n "$glob" ] || continue
+  case "$glob" in \#*) continue ;; esac
+
+  if matches_glob "$NORMALIZED_FILE" "$glob"; then
+    cat >&2 <<MSG
+Blocked: direct edit to generated Harper/Fabric artifact.
+
+File: $FILE_PATH
+Matched generated artifact pattern: $glob
+
+TypeScript under src/ is the source of truth for Harper resources, web assets,
+and shared libraries. Change the matching TypeScript source under src/ and run
+the project build to regenerate harper-app outputs.
+MSG
+    exit 2
+  fi
+done <"$GLOBS_FILE"
+
+exit 0

package/plugins/src/harper-fabric/skills/harper-build-and-deploy/SKILL.md

@@ -53,8 +53,25 @@ relevant deployed or smoke path agree.
 
 ## Deploying to Fabric
 
-Fabric is Harper's distributed deploy network. Deploy packages the component and
-sends it to a target instance:
+Fabric is Harper's distributed deploy network. Lisa ships a create-only GitHub
+Actions workflow at `.github/workflows/deploy.yml` for Harper/Fabric projects. Use
+that workflow as the canonical deployment path for repositories that have adopted
+the template: it builds the project, runs `harper deploy_component` against the
+configured Fabric target, and then runs the project's smoke verification script.
+
+Required GitHub secrets:
+
+- `CLI_TARGET` or `HARPER_FABRIC_TARGET` — Fabric target URL.
+- `CLI_TARGET_USERNAME` — deploy username.
+- `CLI_TARGET_PASSWORD` — deploy password.
+
+Optional GitHub variables:
+
+- `HARPER_PROJECT` — Fabric project name; defaults to the repository name.
+- `HARPER_PACKAGE` — package path; defaults to `harper-app`.
+
+For local debugging or one-off deploys, the equivalent CLI command packages the
+component and sends it to a target instance:
 
 ```bash
 harper deploy_component \
@@ -85,8 +102,11 @@ env var, which store) without recording their values.
 1. `bun run build` — produces fresh `resources.js` / `web/**`.
 2. `bun run typecheck`.
 3. The smallest relevant test command.
-4. For deploy-affecting changes, the project **smoke command** against the local or
-   deployed Harper endpoint.
+4. For deploy-affecting changes, run the create-only GitHub deploy workflow when
+   available, or manually run `harper deploy_component` plus the project **smoke
+   command** against the local or deployed Harper endpoint.
+5. For public HTTP surfaces, run the create-only ZAP baseline workflow or
+   `bash scripts/zap-baseline.sh` with `ZAP_TARGET_URL` set to the deployed app.
 
 If a verification command cannot run, report the exact command and the blocker —
 do not claim completion. When you hit a Harper/Fabric limitation or workaround,

package/tsconfig/harper-fabric.json

@@ -15,6 +15,8 @@
     "coverage",
     "node_modules",
     "harper-app/resources.js",
-    "harper-app/web/**/*.js"
+    "harper-app/resource-*.js",
+    "harper-app/web/**",
+    "harper-app/lib/**"
   ]
 }