@codyswann/lisa 4.55.7 → 4.55.9

package/plugins/lisa-wiki/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.55.7",
+  "version": "4.55.9",
   "description": "Distributable LLM Wiki kernel — ingest, query, lint, and maintain a git-native markdown knowledge base across Claude and Codex.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.55.7",
+  "version": "4.55.9",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.55.7",
+  "version": "4.55.9",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-wiki",
-  "version": "4.55.7",
+  "version": "4.55.9",
   "description": "LLM Wiki — a distributable, git-native markdown knowledge base for Claude Code and Codex",
   "author": {
     "name": "Cody Swann"

package/plugins/src/base/skills/lisa-jira-evidence/SKILL.md

@@ -34,6 +34,9 @@ Upload captured evidence and generated templates to GitHub PR description and JI
 
 ## Prerequisites
 
+- `python3` for destination validation. Configure `server` as a bare HTTPS origin:
+  no userinfo, path prefix, query, or fragment. Invalid destinations are rejected
+  before Basic authorization is constructed.
 - `JIRA_API_TOKEN` environment variable set
 - a jira-cli config — `.lisa/jira-cli/.config.yml` if the `setup-jira-cli`
   SessionStart hook wrote one, otherwise `~/.config/.jira/.config.yml`. `server`

package/plugins/src/base/skills/lisa-jira-evidence/scripts/post-evidence.sh

@@ -73,8 +73,38 @@ else
   echo "  writes the project config — or run 'jira init' locally." >&2
   exit 1
 fi
-JIRA_SERVER=$(grep '^server:' "$JIRA_CONFIG" | awk '{print $2}')
+JIRA_SERVER=$(sed -n 's/^server:[[:space:]]*//p' "$JIRA_CONFIG")
 JIRA_USER=$(grep '^login:' "$JIRA_CONFIG" | awk '{print $2}')
+# Validate before constructing credentials; use only the approved HTTPS origin.
+JIRA_SERVER=$(python3 - "$JIRA_SERVER" <<'PY_ORIGIN'
+import ipaddress
+import re
+import sys
+from urllib.parse import urlsplit
+
+raw = sys.argv[1]
+try:
+    if not raw or any(c <= " " or c >= "\x7f" for c in raw):
+        raise ValueError()
+    url = urlsplit(raw)
+    if (url.scheme != "https" or "@" in url.netloc or "?" in raw
+            or "#" in raw or url.path not in ("", "/") or not url.hostname):
+        raise ValueError()
+    host = url.hostname
+    if url.netloc.startswith("["):
+        host = f"[{ipaddress.IPv6Address(host).compressed}]"
+    elif not re.fullmatch(r"[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*", host):
+        raise ValueError()
+    port = url.port
+    if port == 0:
+        raise ValueError()
+    suffix = f":{port}" if port is not None and port != 443 else ""
+    print(f"https://{host}{suffix}")
+except ValueError:
+    sys.exit("ERROR: JIRA_SERVER must be a bare HTTPS origin without userinfo, path, query or fragment.")
+PY_ORIGIN
+)
+
 GH_REPO=$(gh repo view --json nameWithOwner --jq '.nameWithOwner')
 RELEASE_TAG="pr-assets"
 
@@ -104,7 +134,7 @@ fi
 echo "Found ${#SCREENSHOTS[@]} screenshots and ${#TEXT_EVIDENCE[@]} text evidence files to upload"
 
 # Compute JIRA auth early (used in steps 3 and 4)
-JIRA_AUTH=$(echo -n "$JIRA_USER:$JIRA_API_TOKEN" | base64)
+JIRA_AUTH=$(printf '%s' "$JIRA_USER:$JIRA_API_TOKEN" | base64 | tr -d '\n')
 
 # ── Step 1: Upload to GitHub pr-assets release ──────────────────────────────
 echo ""

package/plugins/src/base/skills/lisa-jira-read-ticket/SKILL.md

@@ -46,7 +46,7 @@ The Atlassian MCP exposes attachment metadata but no binary-fetch tool ([JRACLOU
 bash .claude/skills/jira-read-ticket/scripts/download-attachment.sh <id-or-content-url> <output-path>
 ```
 
-Requires `JIRA_SERVER`, `JIRA_LOGIN`, and `JIRA_API_TOKEN` in the environment (same contract as `jira-evidence`). If those are not set the helper exits with code 2 and a clear remediation message — record the URL only and continue.
+Requires `python3` and `JIRA_API_TOKEN`. `JIRA_SERVER` and `JIRA_LOGIN` prefer environment values, then the project's `.lisa/jira-cli/.config.yml`, then the announced home config fallback. Missing credentials produce exit code 2 — record the URL only and continue. The server must be a bare HTTPS origin without userinfo, path prefix, query, or fragment. A full attachment URL must use that same origin; invalid destinations are rejected before Basic authorization is constructed. Signed external downloads receive no Basic credentials and use HTTPS only.
 
 After download, branch on `mimeType`:
 - `image/*` — pass the local path to image-aware downstream tools

package/plugins/src/base/skills/lisa-jira-read-ticket/scripts/download-attachment.sh

@@ -14,6 +14,8 @@
 #   See https://jira.atlassian.com/browse/JRACLOUD-97830 for the upstream
 #   gap; remove this helper once Atlassian ships a download tool in the MCP.
 #
+# Requires python3 for destination validation.
+#
 # Required env vars:
 #   JIRA_SERVER     - https://<your-tenant>.atlassian.net
 #   JIRA_LOGIN      - login email
@@ -86,7 +88,7 @@ if [[ -z "${JIRA_SERVER:-}" || -z "${JIRA_LOGIN:-}" ]]; then
 fi
 
 if [[ -z "${JIRA_SERVER:-}" && -n "$JIRA_CONFIG" ]]; then
-  JIRA_SERVER=$(grep '^server:' "$JIRA_CONFIG" | awk '{print $2}')
+  JIRA_SERVER=$(sed -n 's/^server:[[:space:]]*//p' "$JIRA_CONFIG")
 fi
 if [[ -z "${JIRA_LOGIN:-}" && -n "$JIRA_CONFIG" ]]; then
   JIRA_LOGIN=$(grep '^login:' "$JIRA_CONFIG" | awk '{print $2}')
@@ -101,18 +103,68 @@ for VAR in JIRA_SERVER JIRA_LOGIN JIRA_API_TOKEN; do
   fi
 done
 
+# Validate before constructing credentials; use only the approved HTTPS origin.
+JIRA_SERVER=$(python3 - "$JIRA_SERVER" <<'PY_ORIGIN'
+import ipaddress
+import re
+import sys
+from urllib.parse import urlsplit
+
+raw = sys.argv[1]
+try:
+    if not raw or any(c <= " " or c >= "\x7f" for c in raw):
+        raise ValueError()
+    url = urlsplit(raw)
+    if (url.scheme != "https" or "@" in url.netloc or "?" in raw
+            or "#" in raw or url.path not in ("", "/") or not url.hostname):
+        raise ValueError()
+    host = url.hostname
+    if url.netloc.startswith("["):
+        host = f"[{ipaddress.IPv6Address(host).compressed}]"
+    elif not re.fullmatch(r"[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*", host):
+        raise ValueError()
+    port = url.port
+    if port == 0:
+        raise ValueError()
+    suffix = f":{port}" if port is not None and port != 443 else ""
+    print(f"https://{host}{suffix}")
+except ValueError:
+    sys.exit("ERROR: JIRA_SERVER must be a bare HTTPS origin without userinfo, path, query or fragment.")
+PY_ORIGIN
+)
+
 OUTPUT_DIR=$(dirname "$OUTPUT_PATH")
 if [[ ! -d "$OUTPUT_DIR" ]]; then
   echo "ERROR: Output directory does not exist: $OUTPUT_DIR" >&2
   exit 3
 fi
 
-if [[ "$ID_OR_URL" == http*://* ]]; then
-  ATTACHMENT_URL="$ID_OR_URL"
+if [[ "$ID_OR_URL" =~ ^[0-9]+$ ]]; then
+  ATTACHMENT_URL="$JIRA_SERVER/rest/api/3/attachment/content/$ID_OR_URL"
 else
-  ATTACHMENT_URL="${JIRA_SERVER%/}/rest/api/3/attachment/content/$ID_OR_URL"
+  ATTACHMENT_URL="$ID_OR_URL"
 fi
 
+# A supplied URL receives Basic auth only when it names the configured origin.
+ATTACHMENT_URL=$(python3 - "$JIRA_SERVER" "$ATTACHMENT_URL" <<'PY_ATTACHMENT'
+import sys
+from urllib.parse import urlsplit, urlunsplit
+
+try:
+    origin, raw = sys.argv[1:]
+    if not raw or any(c <= " " or c >= "\x7f" for c in raw):
+        raise ValueError()
+    base, target = urlsplit(origin), urlsplit(raw)
+    if (target.scheme != "https" or "@" in target.netloc or "#" in raw
+            or target.hostname != base.hostname
+            or (target.port if target.port is not None else 443) != (base.port or 443)):
+        raise ValueError()
+    print(urlunsplit(("https", base.netloc, target.path, target.query, "")))
+except ValueError:
+    sys.exit("ERROR: Attachment must be an ID or an HTTPS URL on the configured Jira origin.")
+PY_ATTACHMENT
+)
+
 JIRA_AUTH=$(printf '%s' "$JIRA_LOGIN:$JIRA_API_TOKEN" | base64 | tr -d '\n')
 
 # Atlassian responds 302 to a signed URL on media.atlassian.com that has its
@@ -134,7 +186,7 @@ case "$HTTP_CODE" in
       echo "ERROR: Got HTTP $HTTP_CODE but no Location header in response." >&2
       exit 1
     fi
-    curl -sSf -o "$OUTPUT_PATH" "$SIGNED_URL" || { echo "ERROR: Download from signed URL failed." >&2; exit 1; }
+    curl --proto '=https' -sSf -o "$OUTPUT_PATH" --url "$SIGNED_URL" || { echo "ERROR: Download from signed URL failed." >&2; exit 1; }
     ;;
   200)
     curl -sSf -o "$OUTPUT_PATH" \

package/plugins/src/expo/skills/jira-evidence/SKILL.md

@@ -17,6 +17,9 @@ Upload captured screenshots and generated templates to GitHub PR description and
 
 ## Prerequisites
 
+- `python3` for destination validation. Configure `server` as a bare HTTPS origin:
+  no userinfo, path prefix, query, or fragment. Invalid destinations are rejected
+  before Basic authorization is constructed.
 - `JIRA_API_TOKEN` environment variable set
 - a jira-cli config — `.lisa/jira-cli/.config.yml` if the `setup-jira-cli`
   SessionStart hook wrote one, otherwise `~/.config/.jira/.config.yml`. `server`

package/plugins/src/expo/skills/jira-evidence/scripts/post-evidence.sh

@@ -73,8 +73,38 @@ else
   echo "  writes the project config — or run 'jira init' locally." >&2
   exit 1
 fi
-JIRA_SERVER=$(grep '^server:' "$JIRA_CONFIG" | awk '{print $2}')
+JIRA_SERVER=$(sed -n 's/^server:[[:space:]]*//p' "$JIRA_CONFIG")
 JIRA_USER=$(grep '^login:' "$JIRA_CONFIG" | awk '{print $2}')
+# Validate before constructing credentials; use only the approved HTTPS origin.
+JIRA_SERVER=$(python3 - "$JIRA_SERVER" <<'PY_ORIGIN'
+import ipaddress
+import re
+import sys
+from urllib.parse import urlsplit
+
+raw = sys.argv[1]
+try:
+    if not raw or any(c <= " " or c >= "\x7f" for c in raw):
+        raise ValueError()
+    url = urlsplit(raw)
+    if (url.scheme != "https" or "@" in url.netloc or "?" in raw
+            or "#" in raw or url.path not in ("", "/") or not url.hostname):
+        raise ValueError()
+    host = url.hostname
+    if url.netloc.startswith("["):
+        host = f"[{ipaddress.IPv6Address(host).compressed}]"
+    elif not re.fullmatch(r"[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*", host):
+        raise ValueError()
+    port = url.port
+    if port == 0:
+        raise ValueError()
+    suffix = f":{port}" if port is not None and port != 443 else ""
+    print(f"https://{host}{suffix}")
+except ValueError:
+    sys.exit("ERROR: JIRA_SERVER must be a bare HTTPS origin without userinfo, path, query or fragment.")
+PY_ORIGIN
+)
+
 GH_REPO=$(gh repo view --json nameWithOwner --jq '.nameWithOwner')
 RELEASE_TAG="pr-assets"
 
@@ -104,7 +134,7 @@ fi
 echo "Found ${#SCREENSHOTS[@]} screenshots and ${#TEXT_EVIDENCE[@]} text evidence files to upload"
 
 # Compute JIRA auth early (used in steps 3 and 4)
-JIRA_AUTH=$(echo -n "$JIRA_USER:$JIRA_API_TOKEN" | base64)
+JIRA_AUTH=$(printf '%s' "$JIRA_USER:$JIRA_API_TOKEN" | base64 | tr -d '\n')
 
 # ── Step 1: Upload to GitHub pr-assets release ──────────────────────────────
 echo ""

package/plugins/src/rails/skills/jira-evidence/SKILL.md

@@ -17,6 +17,9 @@ Upload captured evidence and generated templates to GitHub PR description and JI
 
 ## Prerequisites
 
+- `python3` for destination validation. Configure `server` as a bare HTTPS origin:
+  no userinfo, path prefix, query, or fragment. Invalid destinations are rejected
+  before Basic authorization is constructed.
 - `JIRA_API_TOKEN` environment variable set
 - a jira-cli config — `.lisa/jira-cli/.config.yml` if the `setup-jira-cli`
   SessionStart hook wrote one, otherwise `~/.config/.jira/.config.yml`. `server`

package/plugins/src/rails/skills/jira-evidence/scripts/post-evidence.sh

@@ -73,8 +73,38 @@ else
   echo "  writes the project config — or run 'jira init' locally." >&2
   exit 1
 fi
-JIRA_SERVER=$(grep '^server:' "$JIRA_CONFIG" | awk '{print $2}')
+JIRA_SERVER=$(sed -n 's/^server:[[:space:]]*//p' "$JIRA_CONFIG")
 JIRA_USER=$(grep '^login:' "$JIRA_CONFIG" | awk '{print $2}')
+# Validate before constructing credentials; use only the approved HTTPS origin.
+JIRA_SERVER=$(python3 - "$JIRA_SERVER" <<'PY_ORIGIN'
+import ipaddress
+import re
+import sys
+from urllib.parse import urlsplit
+
+raw = sys.argv[1]
+try:
+    if not raw or any(c <= " " or c >= "\x7f" for c in raw):
+        raise ValueError()
+    url = urlsplit(raw)
+    if (url.scheme != "https" or "@" in url.netloc or "?" in raw
+            or "#" in raw or url.path not in ("", "/") or not url.hostname):
+        raise ValueError()
+    host = url.hostname
+    if url.netloc.startswith("["):
+        host = f"[{ipaddress.IPv6Address(host).compressed}]"
+    elif not re.fullmatch(r"[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*", host):
+        raise ValueError()
+    port = url.port
+    if port == 0:
+        raise ValueError()
+    suffix = f":{port}" if port is not None and port != 443 else ""
+    print(f"https://{host}{suffix}")
+except ValueError:
+    sys.exit("ERROR: JIRA_SERVER must be a bare HTTPS origin without userinfo, path, query or fragment.")
+PY_ORIGIN
+)
+
 GH_REPO=$(gh repo view --json nameWithOwner --jq '.nameWithOwner')
 RELEASE_TAG="pr-assets"
 
@@ -104,7 +134,7 @@ fi
 echo "Found ${#SCREENSHOTS[@]} screenshots and ${#TEXT_EVIDENCE[@]} text evidence files to upload"
 
 # Compute JIRA auth early (used in steps 3 and 4)
-JIRA_AUTH=$(echo -n "$JIRA_USER:$JIRA_API_TOKEN" | base64)
+JIRA_AUTH=$(printf '%s' "$JIRA_USER:$JIRA_API_TOKEN" | base64 | tr -d '\n')
 
 # ── Step 1: Upload to GitHub pr-assets release ──────────────────────────────
 echo ""