@codyswann/lisa 4.42.4 → 4.42.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/core/nightly-e2e-guard-behavior-certificate.js +2 -2
- package/dist/core/upstream-evidence-manifest.d.ts.map +1 -1
- package/dist/core/upstream-evidence-manifest.js +3 -0
- package/dist/core/upstream-evidence-manifest.js.map +1 -1
- package/dist/opencode/plugin-templates/lisa-block-direct-issue-create.ts +72 -0
- package/package.json +4 -4
- package/plugins/lisa/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-agy/plugin.json +1 -1
- package/plugins/lisa-cdk/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-cdk/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-cdk-agy/plugin.json +1 -1
- package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-expo/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-expo/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-expo-agy/plugin.json +1 -1
- package/plugins/lisa-expo-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-expo-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-harper-fabric/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-harper-fabric/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-harper-fabric-agy/plugin.json +1 -1
- package/plugins/lisa-harper-fabric-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-harper-fabric-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-nestjs/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-nestjs/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-nestjs-agy/plugin.json +1 -1
- package/plugins/lisa-nestjs-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-nestjs-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-openclaw/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-openclaw/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-openclaw-agy/plugin.json +1 -1
- package/plugins/lisa-openclaw-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-openclaw-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-phaser/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-phaser/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-phaser-agy/plugin.json +1 -1
- package/plugins/lisa-phaser-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-phaser-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-rails/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-rails/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-rails-agy/plugin.json +1 -1
- package/plugins/lisa-rails-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-rails-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-typescript/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-typescript/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-typescript-agy/plugin.json +1 -1
- package/plugins/lisa-typescript-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-typescript-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-wiki/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-wiki/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-wiki-agy/plugin.json +1 -1
- package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json +1 -1
|
@@ -47,6 +47,70 @@
|
|
|
47
47
|
* `.opencode/plugin/`. It is intentionally excluded from this repo's tsconfig
|
|
48
48
|
* and eslint config — it runs under OpenCode's Bun runtime, not here.
|
|
49
49
|
*/
|
|
50
|
+
/**
|
|
51
|
+
* Where one command ends and the next begins.
|
|
52
|
+
*
|
|
53
|
+
* Only used to decide which segment a filename belongs to, never to decide the
|
|
54
|
+
* verdict — the raw command text is still matched whole, so a separator this
|
|
55
|
+
* misses cannot hide a creation.
|
|
56
|
+
*/
|
|
57
|
+
const COMMAND_SEPARATORS = /\|\||&&|[;|&\n]/u;
|
|
58
|
+
|
|
59
|
+
/**
|
|
60
|
+
* Shells whose `-n` means "parse it, execute none of it".
|
|
61
|
+
*/
|
|
62
|
+
const NOEXEC_SHELLS = new Set(["bash", "dash", "ksh", "sh", "zsh"]);
|
|
63
|
+
|
|
64
|
+
/**
|
|
65
|
+
* Whether a command segment is a shell syntax check.
|
|
66
|
+
*
|
|
67
|
+
* ## Why this exists in a guard that otherwise reads raw text
|
|
68
|
+
*
|
|
69
|
+
* CodySwannGT/lisa#3781 found `bash -n <file>` to be the one shape that puts a
|
|
70
|
+
* path in a command position while provably executing nothing, and the
|
|
71
|
+
* canonical guard got it wrong in both directions: a creation-shaped file
|
|
72
|
+
* earned a false refusal, and a file carrying a human-gate marker earned a
|
|
73
|
+
* false ALLOW — adjudicating as "declared" a command that filed nothing. The
|
|
74
|
+
* silent direction is the worse one. CodySwannGT/lisa#3885 found the arm had
|
|
75
|
+
* reached the canonical guard and not this port.
|
|
76
|
+
*
|
|
77
|
+
* The distinction is noexec, not the program: `bash <file>` still runs the file
|
|
78
|
+
* and is still refused.
|
|
79
|
+
*
|
|
80
|
+
* ## Why the LAST shell token, not the first
|
|
81
|
+
*
|
|
82
|
+
* `nice -n 5 bash -n script.sh` is in the canonical guard's own table, and it
|
|
83
|
+
* carries two `-n` flags belonging to different programs. Reading the first
|
|
84
|
+
* token would see `nice`, conclude "not a shell", and follow the file; reading
|
|
85
|
+
* any `-n` anywhere would let `nice -n 5 bash script.sh` masquerade as a syntax
|
|
86
|
+
* check, which is a real bypass. So the shell is located first and only its own
|
|
87
|
+
* options are read.
|
|
88
|
+
* @param segment One command, already split on shell separators.
|
|
89
|
+
* @returns Whether the segment parses a file instead of running it.
|
|
90
|
+
*/
|
|
91
|
+
const isSyntaxCheck = (segment: string): boolean => {
|
|
92
|
+
const tokens = segment
|
|
93
|
+
.trim()
|
|
94
|
+
.split(/[\s'"]+/u)
|
|
95
|
+
.filter(Boolean);
|
|
96
|
+
const shellAt = tokens.reduce(
|
|
97
|
+
(last, token, index) =>
|
|
98
|
+
NOEXEC_SHELLS.has(token.split("/").pop() ?? "") ? index : last,
|
|
99
|
+
-1
|
|
100
|
+
);
|
|
101
|
+
if (shellAt === -1) return false;
|
|
102
|
+
for (const token of tokens.slice(shellAt + 1)) {
|
|
103
|
+
// Options only. The first operand ends the option list, and a path is not
|
|
104
|
+
// an option however it is spelled.
|
|
105
|
+
if (!token.startsWith("-")) return false;
|
|
106
|
+
if (token === "--noexec") return true;
|
|
107
|
+
// `-c` takes a command STRING, so nothing after it is a file this guard
|
|
108
|
+
// should reason about positionally; `-en` is a cluster carrying noexec.
|
|
109
|
+
if (!token.startsWith("--") && token.slice(1).includes("n")) return true;
|
|
110
|
+
}
|
|
111
|
+
return false;
|
|
112
|
+
};
|
|
113
|
+
|
|
50
114
|
export /**
|
|
51
115
|
*
|
|
52
116
|
*/
|
|
@@ -261,6 +325,14 @@ const LisaBlockDirectIssueCreate = async () => {
|
|
|
261
325
|
const found: { path: string; text: string }[] = [];
|
|
262
326
|
const seen = new Set<string>();
|
|
263
327
|
const candidates = text
|
|
328
|
+
.split(COMMAND_SEPARATORS)
|
|
329
|
+
// A syntax check READS its operand and runs not one line of it, so the
|
|
330
|
+
// file it names is not a file this command executes. Dropped per SEGMENT
|
|
331
|
+
// rather than per command, which is what keeps `bash -n x.sh && bash x.sh`
|
|
332
|
+
// refused: the second segment names the same path and is harvested
|
|
333
|
+
// normally. See {@link isSyntaxCheck}.
|
|
334
|
+
.filter(segment => !isSyntaxCheck(segment))
|
|
335
|
+
.join(" ")
|
|
264
336
|
.split(/[\s'"]+/)
|
|
265
337
|
// `curl -d@payload.json` is one word, and the path is the half after the
|
|
266
338
|
// `@`. Both halves are offered rather than guessing which flag it was.
|
package/package.json
CHANGED
|
@@ -173,7 +173,7 @@
|
|
|
173
173
|
"zod-validation-error": "^4.0.0"
|
|
174
174
|
},
|
|
175
175
|
"name": "@codyswann/lisa",
|
|
176
|
-
"version": "4.42.
|
|
176
|
+
"version": "4.42.5",
|
|
177
177
|
"description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
|
|
178
178
|
"main": "dist/index.js",
|
|
179
179
|
"exports": {
|
|
@@ -321,7 +321,7 @@
|
|
|
321
321
|
"test": "tests"
|
|
322
322
|
},
|
|
323
323
|
"types": "./dist/index.d.ts",
|
|
324
|
-
"lisaReleaseCommit": "
|
|
325
|
-
"gitHead": "
|
|
326
|
-
"lisaReleaseTag": "v4.42.
|
|
324
|
+
"lisaReleaseCommit": "7dcd62366b431f57ac5954534a121dc8ef8c65ab",
|
|
325
|
+
"gitHead": "7dcd62366b431f57ac5954534a121dc8ef8c65ab",
|
|
326
|
+
"lisaReleaseTag": "v4.42.5"
|
|
327
327
|
}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lisa-openclaw",
|
|
3
|
-
"version": "4.42.
|
|
3
|
+
"version": "4.42.5",
|
|
4
4
|
"description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Cody Swann"
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lisa-openclaw",
|
|
3
|
-
"version": "4.42.
|
|
3
|
+
"version": "4.42.5",
|
|
4
4
|
"description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, across Claude and Codex.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Cody Swann"
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lisa-openclaw",
|
|
3
|
-
"version": "4.42.
|
|
3
|
+
"version": "4.42.5",
|
|
4
4
|
"description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Cody Swann"
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lisa-openclaw",
|
|
3
|
-
"version": "4.42.
|
|
3
|
+
"version": "4.42.5",
|
|
4
4
|
"description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Cody Swann"
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lisa-openclaw",
|
|
3
|
-
"version": "4.42.
|
|
3
|
+
"version": "4.42.5",
|
|
4
4
|
"description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Cody Swann"
|