@codyswann/lisa 4.34.18 → 4.34.19
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/all/copy-overwrite/scripts/lisa-hooks/block-managed-file-edits.sh +58 -0
- package/dist/core/lisa-owned-hash-ledger.d.ts.map +1 -1
- package/dist/core/lisa-owned-hash-ledger.js +4 -0
- package/dist/core/lisa-owned-hash-ledger.js.map +1 -1
- package/dist/core/nightly-e2e-guard-behavior-certificate.js +2 -2
- package/dist/core/upstream-evidence-manifest.d.ts.map +1 -1
- package/dist/core/upstream-evidence-manifest.js +3 -2
- package/dist/core/upstream-evidence-manifest.js.map +1 -1
- package/package.json +4 -4
- package/plugins/lisa/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa/hooks/block-managed-file-edits.sh +58 -0
- package/plugins/lisa-agy/plugin.json +1 -1
- package/plugins/lisa-cdk/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-cdk/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-cdk-agy/plugin.json +1 -1
- package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-copilot/hooks/block-managed-file-edits.sh +58 -0
- package/plugins/lisa-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-cursor/hooks/block-managed-file-edits.sh +58 -0
- package/plugins/lisa-expo/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-expo/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-expo-agy/plugin.json +1 -1
- package/plugins/lisa-expo-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-expo-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-harper-fabric/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-harper-fabric/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-harper-fabric-agy/plugin.json +1 -1
- package/plugins/lisa-harper-fabric-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-harper-fabric-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-nestjs/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-nestjs/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-nestjs-agy/plugin.json +1 -1
- package/plugins/lisa-nestjs-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-nestjs-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-openclaw/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-openclaw/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-openclaw-agy/plugin.json +1 -1
- package/plugins/lisa-openclaw-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-openclaw-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-phaser/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-phaser/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-phaser-agy/plugin.json +1 -1
- package/plugins/lisa-phaser-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-phaser-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-rails/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-rails/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-rails-agy/plugin.json +1 -1
- package/plugins/lisa-rails-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-rails-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-typescript/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-typescript/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-typescript-agy/plugin.json +1 -1
- package/plugins/lisa-typescript-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-typescript-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-wiki/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-wiki/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-wiki-agy/plugin.json +1 -1
- package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/src/base/hooks/block-managed-file-edits.sh +58 -0
package/package.json
CHANGED
|
@@ -166,7 +166,7 @@
|
|
|
166
166
|
"zod-validation-error": "^4.0.0"
|
|
167
167
|
},
|
|
168
168
|
"name": "@codyswann/lisa",
|
|
169
|
-
"version": "4.34.
|
|
169
|
+
"version": "4.34.19",
|
|
170
170
|
"description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
|
|
171
171
|
"main": "dist/index.js",
|
|
172
172
|
"exports": {
|
|
@@ -314,7 +314,7 @@
|
|
|
314
314
|
"test": "tests"
|
|
315
315
|
},
|
|
316
316
|
"types": "./dist/index.d.ts",
|
|
317
|
-
"lisaReleaseCommit": "
|
|
318
|
-
"gitHead": "
|
|
319
|
-
"lisaReleaseTag": "v4.34.
|
|
317
|
+
"lisaReleaseCommit": "cfd0ef6086a16d015552bd0403a2d98dc13d7bc1",
|
|
318
|
+
"gitHead": "cfd0ef6086a16d015552bd0403a2d98dc13d7bc1",
|
|
319
|
+
"lisaReleaseTag": "v4.34.19"
|
|
320
320
|
}
|
|
@@ -373,6 +373,64 @@ EOF
|
|
|
373
373
|
}
|
|
374
374
|
|
|
375
375
|
case "$tool_name" in
|
|
376
|
+
apply_patch)
|
|
377
|
+
# Codex's primary edit mechanism, and the one this guard was already
|
|
378
|
+
# registered for while being unable to read it.
|
|
379
|
+
#
|
|
380
|
+
# `src/codex/enforcement-fallback-installer.ts` registers the dispatcher
|
|
381
|
+
# on `Bash|Edit|Write|apply_patch`, so this envelope was already being
|
|
382
|
+
# delivered here - and matched no arm below, fell off the end of the
|
|
383
|
+
# `case`, and exited 0. A registered guard that receives the call and
|
|
384
|
+
# allows it is worse than an unregistered one, because the wiring reads
|
|
385
|
+
# as complete: an auditor sees the matcher forwarding `apply_patch` into
|
|
386
|
+
# a guard about managed files and correctly concludes it is covered
|
|
387
|
+
# (CodySwannGT/lisa#3776).
|
|
388
|
+
#
|
|
389
|
+
# The envelope carries no `file_path`. Verified against codex-cli 0.125.0
|
|
390
|
+
# by capturing real hook stdin - see `src/codex/scripts/_extract-edit-paths.sh`,
|
|
391
|
+
# which performs this same header parse for the Codex-side hooks:
|
|
392
|
+
#
|
|
393
|
+
# Edit / Write -> tool_input.file_path (single string)
|
|
394
|
+
# apply_patch -> tool_input.command (a STRING holding the whole
|
|
395
|
+
# patch, NOT an array)
|
|
396
|
+
#
|
|
397
|
+
# and the patch names its targets in header lines, MANY per patch:
|
|
398
|
+
#
|
|
399
|
+
# *** Add File: <path>
|
|
400
|
+
# *** Update File: <path>
|
|
401
|
+
# *** Delete File: <path>
|
|
402
|
+
#
|
|
403
|
+
# So every header is walked and each target classified; one managed
|
|
404
|
+
# target anywhere in a multi-file patch refuses the whole call, because
|
|
405
|
+
# the patch applies atomically and there is no partial acceptance to
|
|
406
|
+
# offer.
|
|
407
|
+
#
|
|
408
|
+
# This restates `_extract-edit-paths.sh`'s header match rather than
|
|
409
|
+
# sourcing it, and that is forced by where the two files ship: this guard
|
|
410
|
+
# installs to a host's `scripts/lisa-hooks/`, that helper to
|
|
411
|
+
# `.codex/hooks/lisa/`, and neither tree can source across to the other.
|
|
412
|
+
# `tests/unit/hooks/block-managed-file-edits-apply-patch.test.ts` pins the
|
|
413
|
+
# two header sets equal so the restatement cannot drift into a gap - the
|
|
414
|
+
# same answer `core/hook-copy-parity` gives for sibling copies that
|
|
415
|
+
# legitimately cannot be one file. What is NOT restated is the
|
|
416
|
+
# classification: `managed_source` and `refuse` are the single copy here,
|
|
417
|
+
# exactly as for every other arm.
|
|
418
|
+
patch_text="$(printf '%s' "$input" | jq -r '.tool_input.command // empty' 2>/dev/null || true)"
|
|
419
|
+
[ -n "$patch_text" ] || exit 0
|
|
420
|
+
while IFS= read -r patch_line; do
|
|
421
|
+
case "$patch_line" in
|
|
422
|
+
"*** Add File: "* | "*** Update File: "* | "*** Delete File: "*) ;;
|
|
423
|
+
*) continue ;;
|
|
424
|
+
esac
|
|
425
|
+
candidate="${patch_line#*File: }"
|
|
426
|
+
[ -n "$candidate" ] || continue
|
|
427
|
+
if source_path="$(managed_source "$candidate")"; then
|
|
428
|
+
refuse "$candidate" "$source_path" "$(relative_path "$candidate")"
|
|
429
|
+
fi
|
|
430
|
+
done <<EOF
|
|
431
|
+
$patch_text
|
|
432
|
+
EOF
|
|
433
|
+
;;
|
|
376
434
|
Write | Edit | MultiEdit | NotebookEdit | Update)
|
|
377
435
|
paths="$(printf '%s' "$input" | jq -r '
|
|
378
436
|
[ .tool_input.file_path?,
|
|
@@ -373,6 +373,64 @@ EOF
|
|
|
373
373
|
}
|
|
374
374
|
|
|
375
375
|
case "$tool_name" in
|
|
376
|
+
apply_patch)
|
|
377
|
+
# Codex's primary edit mechanism, and the one this guard was already
|
|
378
|
+
# registered for while being unable to read it.
|
|
379
|
+
#
|
|
380
|
+
# `src/codex/enforcement-fallback-installer.ts` registers the dispatcher
|
|
381
|
+
# on `Bash|Edit|Write|apply_patch`, so this envelope was already being
|
|
382
|
+
# delivered here - and matched no arm below, fell off the end of the
|
|
383
|
+
# `case`, and exited 0. A registered guard that receives the call and
|
|
384
|
+
# allows it is worse than an unregistered one, because the wiring reads
|
|
385
|
+
# as complete: an auditor sees the matcher forwarding `apply_patch` into
|
|
386
|
+
# a guard about managed files and correctly concludes it is covered
|
|
387
|
+
# (CodySwannGT/lisa#3776).
|
|
388
|
+
#
|
|
389
|
+
# The envelope carries no `file_path`. Verified against codex-cli 0.125.0
|
|
390
|
+
# by capturing real hook stdin - see `src/codex/scripts/_extract-edit-paths.sh`,
|
|
391
|
+
# which performs this same header parse for the Codex-side hooks:
|
|
392
|
+
#
|
|
393
|
+
# Edit / Write -> tool_input.file_path (single string)
|
|
394
|
+
# apply_patch -> tool_input.command (a STRING holding the whole
|
|
395
|
+
# patch, NOT an array)
|
|
396
|
+
#
|
|
397
|
+
# and the patch names its targets in header lines, MANY per patch:
|
|
398
|
+
#
|
|
399
|
+
# *** Add File: <path>
|
|
400
|
+
# *** Update File: <path>
|
|
401
|
+
# *** Delete File: <path>
|
|
402
|
+
#
|
|
403
|
+
# So every header is walked and each target classified; one managed
|
|
404
|
+
# target anywhere in a multi-file patch refuses the whole call, because
|
|
405
|
+
# the patch applies atomically and there is no partial acceptance to
|
|
406
|
+
# offer.
|
|
407
|
+
#
|
|
408
|
+
# This restates `_extract-edit-paths.sh`'s header match rather than
|
|
409
|
+
# sourcing it, and that is forced by where the two files ship: this guard
|
|
410
|
+
# installs to a host's `scripts/lisa-hooks/`, that helper to
|
|
411
|
+
# `.codex/hooks/lisa/`, and neither tree can source across to the other.
|
|
412
|
+
# `tests/unit/hooks/block-managed-file-edits-apply-patch.test.ts` pins the
|
|
413
|
+
# two header sets equal so the restatement cannot drift into a gap - the
|
|
414
|
+
# same answer `core/hook-copy-parity` gives for sibling copies that
|
|
415
|
+
# legitimately cannot be one file. What is NOT restated is the
|
|
416
|
+
# classification: `managed_source` and `refuse` are the single copy here,
|
|
417
|
+
# exactly as for every other arm.
|
|
418
|
+
patch_text="$(printf '%s' "$input" | jq -r '.tool_input.command // empty' 2>/dev/null || true)"
|
|
419
|
+
[ -n "$patch_text" ] || exit 0
|
|
420
|
+
while IFS= read -r patch_line; do
|
|
421
|
+
case "$patch_line" in
|
|
422
|
+
"*** Add File: "* | "*** Update File: "* | "*** Delete File: "*) ;;
|
|
423
|
+
*) continue ;;
|
|
424
|
+
esac
|
|
425
|
+
candidate="${patch_line#*File: }"
|
|
426
|
+
[ -n "$candidate" ] || continue
|
|
427
|
+
if source_path="$(managed_source "$candidate")"; then
|
|
428
|
+
refuse "$candidate" "$source_path" "$(relative_path "$candidate")"
|
|
429
|
+
fi
|
|
430
|
+
done <<EOF
|
|
431
|
+
$patch_text
|
|
432
|
+
EOF
|
|
433
|
+
;;
|
|
376
434
|
Write | Edit | MultiEdit | NotebookEdit | Update)
|
|
377
435
|
paths="$(printf '%s' "$input" | jq -r '
|
|
378
436
|
[ .tool_input.file_path?,
|
|
@@ -373,6 +373,64 @@ EOF
|
|
|
373
373
|
}
|
|
374
374
|
|
|
375
375
|
case "$tool_name" in
|
|
376
|
+
apply_patch)
|
|
377
|
+
# Codex's primary edit mechanism, and the one this guard was already
|
|
378
|
+
# registered for while being unable to read it.
|
|
379
|
+
#
|
|
380
|
+
# `src/codex/enforcement-fallback-installer.ts` registers the dispatcher
|
|
381
|
+
# on `Bash|Edit|Write|apply_patch`, so this envelope was already being
|
|
382
|
+
# delivered here - and matched no arm below, fell off the end of the
|
|
383
|
+
# `case`, and exited 0. A registered guard that receives the call and
|
|
384
|
+
# allows it is worse than an unregistered one, because the wiring reads
|
|
385
|
+
# as complete: an auditor sees the matcher forwarding `apply_patch` into
|
|
386
|
+
# a guard about managed files and correctly concludes it is covered
|
|
387
|
+
# (CodySwannGT/lisa#3776).
|
|
388
|
+
#
|
|
389
|
+
# The envelope carries no `file_path`. Verified against codex-cli 0.125.0
|
|
390
|
+
# by capturing real hook stdin - see `src/codex/scripts/_extract-edit-paths.sh`,
|
|
391
|
+
# which performs this same header parse for the Codex-side hooks:
|
|
392
|
+
#
|
|
393
|
+
# Edit / Write -> tool_input.file_path (single string)
|
|
394
|
+
# apply_patch -> tool_input.command (a STRING holding the whole
|
|
395
|
+
# patch, NOT an array)
|
|
396
|
+
#
|
|
397
|
+
# and the patch names its targets in header lines, MANY per patch:
|
|
398
|
+
#
|
|
399
|
+
# *** Add File: <path>
|
|
400
|
+
# *** Update File: <path>
|
|
401
|
+
# *** Delete File: <path>
|
|
402
|
+
#
|
|
403
|
+
# So every header is walked and each target classified; one managed
|
|
404
|
+
# target anywhere in a multi-file patch refuses the whole call, because
|
|
405
|
+
# the patch applies atomically and there is no partial acceptance to
|
|
406
|
+
# offer.
|
|
407
|
+
#
|
|
408
|
+
# This restates `_extract-edit-paths.sh`'s header match rather than
|
|
409
|
+
# sourcing it, and that is forced by where the two files ship: this guard
|
|
410
|
+
# installs to a host's `scripts/lisa-hooks/`, that helper to
|
|
411
|
+
# `.codex/hooks/lisa/`, and neither tree can source across to the other.
|
|
412
|
+
# `tests/unit/hooks/block-managed-file-edits-apply-patch.test.ts` pins the
|
|
413
|
+
# two header sets equal so the restatement cannot drift into a gap - the
|
|
414
|
+
# same answer `core/hook-copy-parity` gives for sibling copies that
|
|
415
|
+
# legitimately cannot be one file. What is NOT restated is the
|
|
416
|
+
# classification: `managed_source` and `refuse` are the single copy here,
|
|
417
|
+
# exactly as for every other arm.
|
|
418
|
+
patch_text="$(printf '%s' "$input" | jq -r '.tool_input.command // empty' 2>/dev/null || true)"
|
|
419
|
+
[ -n "$patch_text" ] || exit 0
|
|
420
|
+
while IFS= read -r patch_line; do
|
|
421
|
+
case "$patch_line" in
|
|
422
|
+
"*** Add File: "* | "*** Update File: "* | "*** Delete File: "*) ;;
|
|
423
|
+
*) continue ;;
|
|
424
|
+
esac
|
|
425
|
+
candidate="${patch_line#*File: }"
|
|
426
|
+
[ -n "$candidate" ] || continue
|
|
427
|
+
if source_path="$(managed_source "$candidate")"; then
|
|
428
|
+
refuse "$candidate" "$source_path" "$(relative_path "$candidate")"
|
|
429
|
+
fi
|
|
430
|
+
done <<EOF
|
|
431
|
+
$patch_text
|
|
432
|
+
EOF
|
|
433
|
+
;;
|
|
376
434
|
Write | Edit | MultiEdit | NotebookEdit | Update)
|
|
377
435
|
paths="$(printf '%s' "$input" | jq -r '
|
|
378
436
|
[ .tool_input.file_path?,
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lisa-openclaw",
|
|
3
|
-
"version": "4.34.
|
|
3
|
+
"version": "4.34.19",
|
|
4
4
|
"description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Cody Swann"
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lisa-openclaw",
|
|
3
|
-
"version": "4.34.
|
|
3
|
+
"version": "4.34.19",
|
|
4
4
|
"description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, across Claude and Codex.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Cody Swann"
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lisa-openclaw",
|
|
3
|
-
"version": "4.34.
|
|
3
|
+
"version": "4.34.19",
|
|
4
4
|
"description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Cody Swann"
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lisa-openclaw",
|
|
3
|
-
"version": "4.34.
|
|
3
|
+
"version": "4.34.19",
|
|
4
4
|
"description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Cody Swann"
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lisa-openclaw",
|
|
3
|
-
"version": "4.34.
|
|
3
|
+
"version": "4.34.19",
|
|
4
4
|
"description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Cody Swann"
|