@codyswann/lisa 2.286.4 → 2.286.5

package/all/copy-overwrite/scripts/lisa-work-item.mjs

@@ -46,6 +46,24 @@ function git(args, options = {}) {
   return run("git", args, options).stdout.trim();
 }
 
+function curlConfigValue(value) {
+  return `"${String(value)
+    .replace(/\\/g, "\\\\")
+    .replace(/"/g, '\\"')
+    .replace(/\r/g, "\\r")
+    .replace(/\n/g, "\\n")}"`;
+}
+
+function secureCurl(args, entries, options = {}) {
+  const input = `${entries
+    .map(([name, value]) => `${name} = ${curlConfigValue(value)}`)
+    .join("\n")}\n`;
+  return run("curl", ["-fsS", "--config", "-", ...args], {
+    ...options,
+    input,
+  });
+}
+
 function projectRoot() {
   return git(["rev-parse", "--show-toplevel"]);
 }
@@ -536,15 +554,11 @@ function jiraIssue(ref, contract) {
   const credentials = jiraCredentials(contract);
   if (credentials) {
     const url = `${credentials.baseUrl}/rest/api/3/issue/${encodeURIComponent(ref)}?fields=project,status,labels,components,issuetype,subtasks,comment`;
-    const result = run(
-      "curl",
+    const result = secureCurl(
+      [url],
       [
-        "-fsS",
-        "-u",
-        `${credentials.login}:${credentials.token}`,
-        "-H",
-        "Accept: application/json",
-        url,
+        ["user", `${credentials.login}:${credentials.token}`],
+        ["header", "Accept: application/json"],
       ],
       { allowFailure: true }
     );
@@ -680,19 +694,13 @@ function linearIssue(ref, contract) {
   const query =
     "query($id:String!){issue(id:$id){id identifier team{key} state{type} labels{nodes{name}} children{nodes{state{type}}} attachments{nodes{url}} comments{nodes{body}}}}";
   const payload = JSON.stringify({ query, variables: { id: ref } });
-  const result = run(
-    "curl",
+  const result = secureCurl(
+    ["https://api.linear.app/graphql"],
     [
-      "-fsS",
-      "-X",
-      "POST",
-      "-H",
-      "Content-Type: application/json",
-      "-H",
-      `Authorization: ${token}`,
-      "--data-binary",
-      payload,
-      "https://api.linear.app/graphql",
+      ["request", "POST"],
+      ["header", "Content-Type: application/json"],
+      ["header", `Authorization: ${token}`],
+      ["data-binary", payload],
     ],
     { allowFailure: true }
   );
@@ -790,15 +798,11 @@ function assertBacklink(
   const credentials = jiraCredentials(contract);
   if (credentials) {
     const url = `${credentials.baseUrl}/rest/api/3/issue/${encodeURIComponent(ref)}/remotelink`;
-    const result = run(
-      "curl",
+    const result = secureCurl(
+      [url],
       [
-        "-fsS",
-        "-u",
-        `${credentials.login}:${credentials.token}`,
-        "-H",
-        "Accept: application/json",
-        url,
+        ["user", `${credentials.login}:${credentials.token}`],
+        ["header", "Accept: application/json"],
       ],
       { allowFailure: true }
     );
@@ -1092,7 +1096,7 @@ function main() {
 }
 
 try {
-  await main();
+  main();
 } catch (error) {
   const detail = error instanceof Error ? error.message : String(error);
   console.error(

package/dist/core/upstream-evidence-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upstream-evidence-manifest.d.ts","sourceRoot":"","sources":["../../src/core/upstream-evidence-manifest.ts"],"names":[],"mappings":"AACA,iFAAiF;AACjF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAshEpE,CAAC;AAEL,4EAA4E;AAC5E,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAutMjE,CAAC;AAEL,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAk6I/D,CAAC"}
+{"version":3,"file":"upstream-evidence-manifest.d.ts","sourceRoot":"","sources":["../../src/core/upstream-evidence-manifest.ts"],"names":[],"mappings":"AACA,iFAAiF;AACjF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAshEpE,CAAC;AAEL,4EAA4E;AAC5E,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAwtMjE,CAAC;AAEL,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAk6I/D,CAAC"}

package/dist/core/upstream-evidence-manifest.js

@@ -2,7 +2,7 @@
 /** Generated by scripts/generate-upstream-evidence-manifest.mjs. Do not edit. */
 export const UPSTREAM_EVIDENCE_MANIFEST = Object.freeze({
     "all/copy-contents/gitignore": "06b56376465d5421db55d0b04958bbc79fdbf33b42f0559fe5ef6875ced1160f",
-    "all/copy-overwrite/scripts/lisa-work-item.mjs": "f88f69d44693084428f44e3f2b80afecda08c7ee8747588f40277fdc9396fd8f",
+    "all/copy-overwrite/scripts/lisa-work-item.mjs": "4c263fef48c03b3b6c623ea8a6cd55505bfaf28197e5072226ea35f9f3d26885",
     "all/create-only/.claude/rules/PROJECT_RULES.md": "6e1c7923ad2a15356babc60c97e7f97be728d790af285b6a7cd7d1b4d39cd97f",
     "all/create-only/.lisaignore": "3c9827e7e98daa46510b5357cd6dd9406da1821e64cc46d2eea9f311cd6d06b9",
     "all/create-only/scripts/remote-agent-aws-setup.sh": "7677908a345891810d2104ba8b2fd1a8318bb29c408fb5ce0110d57beef9b556",
@@ -6829,6 +6829,7 @@ export const UPSTREAM_SURFACE_MANIFEST = Object.freeze({
     "tests/unit/hooks/verification-failure-mode-fixtures.test.ts": true,
     "tests/unit/hooks/work-item-wiring.test.ts": true,
     "tests/unit/hooks/worktree-create.test.ts": true,
+    "tests/unit/migrations/ensure-audit-ignore-local-exclusions-esbuild.test.ts": true,
     "tests/unit/migrations/ensure-audit-ignore-local-exclusions.test.ts": true,
     "tests/unit/migrations/ensure-jest-rn-mock-accessibility-manager.test.ts": true,
     "tests/unit/migrations/ensure-lisa-postinstall.test.ts": true,