@codyswann/lisa 4.4.17 → 4.4.18
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/all/copy-overwrite/scripts/lisa-hooks/block-direct-issue-create.sh +53 -13
- package/dist/core/lisa-owned-hash-ledger.d.ts.map +1 -1
- package/dist/core/lisa-owned-hash-ledger.js +1 -0
- package/dist/core/lisa-owned-hash-ledger.js.map +1 -1
- package/dist/core/upstream-evidence-manifest.js +2 -2
- package/package.json +1 -1
- package/plugins/lisa/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa/hooks/block-direct-issue-create.sh +53 -13
- package/plugins/lisa-agy/hooks/block-direct-issue-create.sh +53 -13
- package/plugins/lisa-agy/plugin.json +1 -1
- package/plugins/lisa-cdk/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-cdk/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-cdk-agy/plugin.json +1 -1
- package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-copilot/hooks/block-direct-issue-create.sh +53 -13
- package/plugins/lisa-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-cursor/hooks/block-direct-issue-create.sh +53 -13
- package/plugins/lisa-expo/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-expo/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-expo-agy/plugin.json +1 -1
- package/plugins/lisa-expo-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-expo-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-harper-fabric/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-harper-fabric/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-harper-fabric-agy/plugin.json +1 -1
- package/plugins/lisa-harper-fabric-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-harper-fabric-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-nestjs/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-nestjs/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-nestjs-agy/plugin.json +1 -1
- package/plugins/lisa-nestjs-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-nestjs-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-openclaw/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-openclaw/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-openclaw-agy/plugin.json +1 -1
- package/plugins/lisa-openclaw-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-openclaw-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-phaser/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-phaser/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-phaser-agy/plugin.json +1 -1
- package/plugins/lisa-phaser-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-phaser-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-rails/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-rails/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-rails-agy/plugin.json +1 -1
- package/plugins/lisa-rails-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-rails-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-typescript/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-typescript/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-typescript-agy/plugin.json +1 -1
- package/plugins/lisa-typescript-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-typescript-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-wiki/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-wiki/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-wiki-agy/plugin.json +1 -1
- package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/src/base/hooks/block-direct-issue-create.sh +53 -13
|
@@ -389,13 +389,21 @@ POST_PAYLOAD_FLAGS = {
|
|
|
389
389
|
# read as an endpoint: it is data being sent, not the address being posted to.
|
|
390
390
|
PAYLOAD_VALUE_FLAGS = {"-f", "-F", "--raw-field", "--field"}
|
|
391
391
|
|
|
392
|
-
|
|
392
|
+
# Matched against a token's PATH COMPONENT, never the raw argument — see
|
|
393
|
+
# `endpoint_path`. The `$` anchor is load-bearing and stays: without it
|
|
394
|
+
# `repos/o/r/issues/123/comments` reads as a creation, which is a different
|
|
395
|
+
# operation this guard must not refuse. The segment classes exclude `?` and
|
|
396
|
+
# `#` so the anchor cannot be reached past a decoration even if some future
|
|
397
|
+
# caller forgets to parse first.
|
|
398
|
+
GITHUB_ISSUES_PATH = re.compile(r"repos/[^/\s?#]+/[^/\s?#]+/issues/?$")
|
|
393
399
|
GITHUB_ISSUES_URL = re.compile(r"api\.github\.com/repos/[^/\s]+/[^/\s]+/issues")
|
|
394
400
|
# The repository a creation is ADDRESSED at, which decides whose ready role
|
|
395
401
|
# answers for it. `gh` accepts the flag before or after the subcommand and in
|
|
396
402
|
# either spelling, and the REST paths carry the same pair positionally.
|
|
397
403
|
REPO_FLAGS = {"--repo", "-R"}
|
|
398
|
-
GITHUB_ISSUES_PATH_REPO = re.compile(
|
|
404
|
+
GITHUB_ISSUES_PATH_REPO = re.compile(
|
|
405
|
+
r"repos/([^/\s?#]+)/([^/\s?#]+)/issues/?$"
|
|
406
|
+
)
|
|
399
407
|
GITHUB_ISSUES_URL_REPO = re.compile(
|
|
400
408
|
r"api\.github\.com/repos/([^/\s]+)/([^/\s]+)/issues"
|
|
401
409
|
)
|
|
@@ -663,8 +671,33 @@ def is_write_request(args):
|
|
|
663
671
|
return False
|
|
664
672
|
|
|
665
673
|
|
|
666
|
-
def
|
|
667
|
-
"""
|
|
674
|
+
def endpoint_path(token):
|
|
675
|
+
"""The path component of an endpoint-shaped argument.
|
|
676
|
+
|
|
677
|
+
An endpoint is a URL, and a URL is not its path: `?query` and `#fragment`
|
|
678
|
+
are separate components that address the SAME resource. Comparing the raw
|
|
679
|
+
argument against a path pattern therefore recognised a URL SHAPE rather
|
|
680
|
+
than an endpoint, and `repos/o/r/issues?foo=1` — the identical request —
|
|
681
|
+
was classified as a non-creation and allowed (#2939).
|
|
682
|
+
|
|
683
|
+
Trailing whitespace is stripped for the same reason: `"repos/o/r/issues "`
|
|
684
|
+
survives shlex as one token and addresses the same endpoint, but defeats an
|
|
685
|
+
end-anchored comparison just as a query string does.
|
|
686
|
+
|
|
687
|
+
Args:
|
|
688
|
+
token: One argument, possibly a decorated endpoint.
|
|
689
|
+
|
|
690
|
+
Returns:
|
|
691
|
+
The token with any fragment, query, and surrounding whitespace removed.
|
|
692
|
+
"""
|
|
693
|
+
# Fragment first: it is the LAST component of a URL, so `path?q#f` yields
|
|
694
|
+
# `path?q` here and `path` after the query split, while a malformed
|
|
695
|
+
# `path#a?b` still collapses to `path` rather than keeping `a?b`.
|
|
696
|
+
return token.split("#", 1)[0].split("?", 1)[0].strip()
|
|
697
|
+
|
|
698
|
+
|
|
699
|
+
def endpoint_paths(args, pattern):
|
|
700
|
+
"""Endpoint path components matching a pattern, excluding payload values.
|
|
668
701
|
|
|
669
702
|
Scans every token rather than a filtered positional list, because a BOOLEAN
|
|
670
703
|
flag has no value to skip and filtering swallowed the endpoint behind one:
|
|
@@ -672,21 +705,28 @@ def endpoint_tokens(args, pattern):
|
|
|
672
705
|
behind `--silent`. Payload values are excluded the other way, so
|
|
673
706
|
`-f path=repos/o/r/issues` is not mistaken for the address being posted to.
|
|
674
707
|
|
|
708
|
+
That payload exclusion is tested on the PATH, not the raw token, and the
|
|
709
|
+
order matters: a query string carries `=`, so testing the raw token skipped
|
|
710
|
+
`repos/o/r/issues?foo=1` before the pattern ever ran. Two independent
|
|
711
|
+
mechanisms — this filter and the pattern's end anchor — hid the same
|
|
712
|
+
creation, which is why fixing only the anchor would not have closed it.
|
|
713
|
+
|
|
675
714
|
Args:
|
|
676
715
|
args: A command's arguments.
|
|
677
|
-
pattern: The endpoint regex.
|
|
716
|
+
pattern: The endpoint regex, written against a path component.
|
|
678
717
|
|
|
679
718
|
Returns:
|
|
680
|
-
|
|
719
|
+
The matching path components, decoration removed.
|
|
681
720
|
"""
|
|
682
721
|
found = []
|
|
683
722
|
for index, token in enumerate(args):
|
|
684
|
-
|
|
723
|
+
path = endpoint_path(token)
|
|
724
|
+
if "=" in path:
|
|
685
725
|
continue
|
|
686
726
|
if index > 0 and args[index - 1] in PAYLOAD_VALUE_FLAGS:
|
|
687
727
|
continue
|
|
688
|
-
if pattern.search(
|
|
689
|
-
found.append(
|
|
728
|
+
if pattern.search(path):
|
|
729
|
+
found.append(path)
|
|
690
730
|
return found
|
|
691
731
|
|
|
692
732
|
|
|
@@ -712,7 +752,7 @@ def creation_signature(name, args):
|
|
|
712
752
|
if "api" in args:
|
|
713
753
|
if GRAPHQL_CREATE.search(joined):
|
|
714
754
|
return "gh api graphql issue creation"
|
|
715
|
-
if
|
|
755
|
+
if endpoint_paths(args, GITHUB_ISSUES_PATH) and is_write_request(args):
|
|
716
756
|
return "gh api POST .../issues"
|
|
717
757
|
return None
|
|
718
758
|
|
|
@@ -820,7 +860,7 @@ def target_repository(args):
|
|
|
820
860
|
Read only from positions that actually reach the created item: a flag
|
|
821
861
|
before the end-of-options marker, or the endpoint the write is posted to.
|
|
822
862
|
A `-f repo=o/r` payload field is data being SENT, not the address being
|
|
823
|
-
posted to, and `
|
|
863
|
+
posted to, and `endpoint_paths` already excludes it.
|
|
824
864
|
|
|
825
865
|
Args:
|
|
826
866
|
args: A creating command's arguments.
|
|
@@ -837,8 +877,8 @@ def target_repository(args):
|
|
|
837
877
|
head, value = token.split("=", 1)
|
|
838
878
|
if head in REPO_FLAGS:
|
|
839
879
|
return normalise_repo(value)
|
|
840
|
-
for
|
|
841
|
-
match = GITHUB_ISSUES_PATH_REPO.search(
|
|
880
|
+
for path in endpoint_paths(scoped, GITHUB_ISSUES_PATH):
|
|
881
|
+
match = GITHUB_ISSUES_PATH_REPO.search(path)
|
|
842
882
|
if match:
|
|
843
883
|
return normalise_repo("%s/%s" % (match.group(1), match.group(2)))
|
|
844
884
|
for token in scoped:
|
|
@@ -389,13 +389,21 @@ POST_PAYLOAD_FLAGS = {
|
|
|
389
389
|
# read as an endpoint: it is data being sent, not the address being posted to.
|
|
390
390
|
PAYLOAD_VALUE_FLAGS = {"-f", "-F", "--raw-field", "--field"}
|
|
391
391
|
|
|
392
|
-
|
|
392
|
+
# Matched against a token's PATH COMPONENT, never the raw argument — see
|
|
393
|
+
# `endpoint_path`. The `$` anchor is load-bearing and stays: without it
|
|
394
|
+
# `repos/o/r/issues/123/comments` reads as a creation, which is a different
|
|
395
|
+
# operation this guard must not refuse. The segment classes exclude `?` and
|
|
396
|
+
# `#` so the anchor cannot be reached past a decoration even if some future
|
|
397
|
+
# caller forgets to parse first.
|
|
398
|
+
GITHUB_ISSUES_PATH = re.compile(r"repos/[^/\s?#]+/[^/\s?#]+/issues/?$")
|
|
393
399
|
GITHUB_ISSUES_URL = re.compile(r"api\.github\.com/repos/[^/\s]+/[^/\s]+/issues")
|
|
394
400
|
# The repository a creation is ADDRESSED at, which decides whose ready role
|
|
395
401
|
# answers for it. `gh` accepts the flag before or after the subcommand and in
|
|
396
402
|
# either spelling, and the REST paths carry the same pair positionally.
|
|
397
403
|
REPO_FLAGS = {"--repo", "-R"}
|
|
398
|
-
GITHUB_ISSUES_PATH_REPO = re.compile(
|
|
404
|
+
GITHUB_ISSUES_PATH_REPO = re.compile(
|
|
405
|
+
r"repos/([^/\s?#]+)/([^/\s?#]+)/issues/?$"
|
|
406
|
+
)
|
|
399
407
|
GITHUB_ISSUES_URL_REPO = re.compile(
|
|
400
408
|
r"api\.github\.com/repos/([^/\s]+)/([^/\s]+)/issues"
|
|
401
409
|
)
|
|
@@ -663,8 +671,33 @@ def is_write_request(args):
|
|
|
663
671
|
return False
|
|
664
672
|
|
|
665
673
|
|
|
666
|
-
def
|
|
667
|
-
"""
|
|
674
|
+
def endpoint_path(token):
|
|
675
|
+
"""The path component of an endpoint-shaped argument.
|
|
676
|
+
|
|
677
|
+
An endpoint is a URL, and a URL is not its path: `?query` and `#fragment`
|
|
678
|
+
are separate components that address the SAME resource. Comparing the raw
|
|
679
|
+
argument against a path pattern therefore recognised a URL SHAPE rather
|
|
680
|
+
than an endpoint, and `repos/o/r/issues?foo=1` — the identical request —
|
|
681
|
+
was classified as a non-creation and allowed (#2939).
|
|
682
|
+
|
|
683
|
+
Trailing whitespace is stripped for the same reason: `"repos/o/r/issues "`
|
|
684
|
+
survives shlex as one token and addresses the same endpoint, but defeats an
|
|
685
|
+
end-anchored comparison just as a query string does.
|
|
686
|
+
|
|
687
|
+
Args:
|
|
688
|
+
token: One argument, possibly a decorated endpoint.
|
|
689
|
+
|
|
690
|
+
Returns:
|
|
691
|
+
The token with any fragment, query, and surrounding whitespace removed.
|
|
692
|
+
"""
|
|
693
|
+
# Fragment first: it is the LAST component of a URL, so `path?q#f` yields
|
|
694
|
+
# `path?q` here and `path` after the query split, while a malformed
|
|
695
|
+
# `path#a?b` still collapses to `path` rather than keeping `a?b`.
|
|
696
|
+
return token.split("#", 1)[0].split("?", 1)[0].strip()
|
|
697
|
+
|
|
698
|
+
|
|
699
|
+
def endpoint_paths(args, pattern):
|
|
700
|
+
"""Endpoint path components matching a pattern, excluding payload values.
|
|
668
701
|
|
|
669
702
|
Scans every token rather than a filtered positional list, because a BOOLEAN
|
|
670
703
|
flag has no value to skip and filtering swallowed the endpoint behind one:
|
|
@@ -672,21 +705,28 @@ def endpoint_tokens(args, pattern):
|
|
|
672
705
|
behind `--silent`. Payload values are excluded the other way, so
|
|
673
706
|
`-f path=repos/o/r/issues` is not mistaken for the address being posted to.
|
|
674
707
|
|
|
708
|
+
That payload exclusion is tested on the PATH, not the raw token, and the
|
|
709
|
+
order matters: a query string carries `=`, so testing the raw token skipped
|
|
710
|
+
`repos/o/r/issues?foo=1` before the pattern ever ran. Two independent
|
|
711
|
+
mechanisms — this filter and the pattern's end anchor — hid the same
|
|
712
|
+
creation, which is why fixing only the anchor would not have closed it.
|
|
713
|
+
|
|
675
714
|
Args:
|
|
676
715
|
args: A command's arguments.
|
|
677
|
-
pattern: The endpoint regex.
|
|
716
|
+
pattern: The endpoint regex, written against a path component.
|
|
678
717
|
|
|
679
718
|
Returns:
|
|
680
|
-
|
|
719
|
+
The matching path components, decoration removed.
|
|
681
720
|
"""
|
|
682
721
|
found = []
|
|
683
722
|
for index, token in enumerate(args):
|
|
684
|
-
|
|
723
|
+
path = endpoint_path(token)
|
|
724
|
+
if "=" in path:
|
|
685
725
|
continue
|
|
686
726
|
if index > 0 and args[index - 1] in PAYLOAD_VALUE_FLAGS:
|
|
687
727
|
continue
|
|
688
|
-
if pattern.search(
|
|
689
|
-
found.append(
|
|
728
|
+
if pattern.search(path):
|
|
729
|
+
found.append(path)
|
|
690
730
|
return found
|
|
691
731
|
|
|
692
732
|
|
|
@@ -712,7 +752,7 @@ def creation_signature(name, args):
|
|
|
712
752
|
if "api" in args:
|
|
713
753
|
if GRAPHQL_CREATE.search(joined):
|
|
714
754
|
return "gh api graphql issue creation"
|
|
715
|
-
if
|
|
755
|
+
if endpoint_paths(args, GITHUB_ISSUES_PATH) and is_write_request(args):
|
|
716
756
|
return "gh api POST .../issues"
|
|
717
757
|
return None
|
|
718
758
|
|
|
@@ -820,7 +860,7 @@ def target_repository(args):
|
|
|
820
860
|
Read only from positions that actually reach the created item: a flag
|
|
821
861
|
before the end-of-options marker, or the endpoint the write is posted to.
|
|
822
862
|
A `-f repo=o/r` payload field is data being SENT, not the address being
|
|
823
|
-
posted to, and `
|
|
863
|
+
posted to, and `endpoint_paths` already excludes it.
|
|
824
864
|
|
|
825
865
|
Args:
|
|
826
866
|
args: A creating command's arguments.
|
|
@@ -837,8 +877,8 @@ def target_repository(args):
|
|
|
837
877
|
head, value = token.split("=", 1)
|
|
838
878
|
if head in REPO_FLAGS:
|
|
839
879
|
return normalise_repo(value)
|
|
840
|
-
for
|
|
841
|
-
match = GITHUB_ISSUES_PATH_REPO.search(
|
|
880
|
+
for path in endpoint_paths(scoped, GITHUB_ISSUES_PATH):
|
|
881
|
+
match = GITHUB_ISSUES_PATH_REPO.search(path)
|
|
842
882
|
if match:
|
|
843
883
|
return normalise_repo("%s/%s" % (match.group(1), match.group(2)))
|
|
844
884
|
for token in scoped:
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lisa-openclaw",
|
|
3
|
-
"version": "4.4.
|
|
3
|
+
"version": "4.4.18",
|
|
4
4
|
"description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Cody Swann"
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lisa-openclaw",
|
|
3
|
-
"version": "4.4.
|
|
3
|
+
"version": "4.4.18",
|
|
4
4
|
"description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, across Claude and Codex.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Cody Swann"
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lisa-openclaw",
|
|
3
|
-
"version": "4.4.
|
|
3
|
+
"version": "4.4.18",
|
|
4
4
|
"description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Cody Swann"
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lisa-openclaw",
|
|
3
|
-
"version": "4.4.
|
|
3
|
+
"version": "4.4.18",
|
|
4
4
|
"description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Cody Swann"
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lisa-openclaw",
|
|
3
|
-
"version": "4.4.
|
|
3
|
+
"version": "4.4.18",
|
|
4
4
|
"description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Cody Swann"
|