@codyswann/lisa 4.66.1 → 4.66.3

package/typescript/copy-contents/.husky/commit-msg

@@ -143,20 +143,132 @@ fi
 
 echo "🤖 Checking for AI co-authorship..."
 
-# Accept attribution from any supported coding agent (Claude or Codex),
-# case-insensitively. Claude Code emits "Co-Authored-By: Claude"; the Codex CLI
-# emits "Co-authored-by: Codex <noreply@openai.com>".
-if ! printf '%s\n' "$COMMIT_MSG" | grep -Eiq "Co-authored-by:.*(Claude|Codex)"; then
+# Fleet agents — the runtimes Lisa ships plugin distributions for — pass on
+# the trailer alone. Any other co-author — an agent Lisa does not distribute
+# to (e.g. Devin) OR A HUMAN — also requires the AI-Agent/AI-Model/AI-Effort
+# block: the gate enforces attribution, not agent gatekeeping, and a trailer
+# name cannot tell a human from a non-fleet agent, so both are held to the
+# same rule. The AI-* trailers describe the commit's DRIVER, not every
+# co-author — a human pairing alongside an agent is covered by the agent's
+# block, while a commit with ONLY a human co-author is refused by the check
+# below: its AI-Agent trailer must name a listed co-author, and a human-only
+# trailer block has no agent to name. (A human could still write
+# "AI-Agent: <their own name>" to self-attest as the agent — the trailer is
+# the attestation surface, not a proof, so the gate documents rather than
+# polices that.) CodySwannGT/lisa#4282, CodySwannGT/lisa#4294.
+LISA_FLEET_AGENT_RE="Claude|Codex|Cursor|OpenCode|Antigravity|Copilot"
+# Co-authors come from the message's trailer block via git-interpret-trailers —
+# a "Co-authored-by:" string inside prose is not attribution — and every entry
+# is judged on its own, so a fleet trailer can never cover a sibling trailer
+# whose agent owes metadata. The AI-* checks below read the SAME parsed
+# trailer block, so an "AI-Agent:" line in body prose cannot satisfy them.
+ALL_TRAILERS=$(git interpret-trailers --parse "$COMMIT_MSG_FILE" 2>/dev/null || true)
+COAUTHOR_TRAILERS=$(printf '%s\n' "$ALL_TRAILERS" | grep -iE "^Co-authored-by:" || true)
+
+if ! printf '%s\n' "$COAUTHOR_TRAILERS" | grep -Eiq "Co-authored-by:"; then
+  no_coauthor=1
+else
+  no_coauthor=0
+fi
+
+nonfleet_coauthor=0
+if [ "$no_coauthor" -eq 0 ]; then
+  while IFS= read -r trailer; do
+    [ -z "$trailer" ] && continue
+    agent_name=$(printf '%s' "${trailer#*:}" | sed -e 's/<[^>]*>//g' -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//')
+    if ! printf '%s\n' "$agent_name" | grep -Eiq "^(${LISA_FLEET_AGENT_RE})([[:space:]]|$)"; then
+      nonfleet_coauthor=1
+    fi
+  done <<LISA_COAUTHOR_TRAILERS
+$COAUTHOR_TRAILERS
+LISA_COAUTHOR_TRAILERS
+fi
+
+if [ "$nonfleet_coauthor" -eq 1 ]; then
+  missing_agent_metadata=0
+  for trailer in AI-Agent AI-Model AI-Effort; do
+    if ! printf '%s\n' "$ALL_TRAILERS" | grep -Eiq "^${trailer}:[[:space:]]*[^[:space:]]"; then
+      missing_agent_metadata=1
+    fi
+  done
+  # The AI-Agent trailer must also NAME one of the listed co-authors —
+  # metadata attesting to nobody in the trailer block is not attribution.
+  ai_agent=$(printf '%s\n' "$ALL_TRAILERS" | grep -iE "^AI-Agent:" | head -1 | sed -E 's/^[^:]+:[[:space:]]*//;s/[[:space:]]*$//')
+  if [ -n "$ai_agent" ] && ! printf '%s\n' "$COAUTHOR_TRAILERS" | grep -Fqi "$ai_agent"; then
+    missing_agent_metadata=1
+  fi
+  if [ "$missing_agent_metadata" -eq 1 ]; then
+    echo ""
+    echo "❌ Non-fleet agents must include AI metadata trailers!"
+    echo ""
+    echo "Agents outside the supported fleet (Claude, Codex, Cursor, OpenCode,"
+    echo "Antigravity, Copilot) must carry provenance metadata alongside the"
+    echo "Co-authored-by trailer — this includes a human co-author, who is"
+    echo "covered by the driving agent's AI-Agent/AI-Model/AI-Effort block:"
+    echo "  AI-Agent: <agent name>"
+    echo "  AI-Model: <provider/model>"
+    echo "  AI-Effort: <effort or runtime value>"
+    echo ""
+    echo "The AI-Agent value must name one of the commit's Co-authored-by"
+    echo "entries — it attests to which listed author is the driving agent."
+    echo ""
+    lisa_commit_gate_families ai-coauthorship
+    exit 1
+  fi
+elif [ "$no_coauthor" -eq 1 ]; then
   echo ""
   echo "❌ Commit message must include AI co-authorship!"
   echo ""
-  echo "All commits must include a Co-authored-by line for a coding agent (Claude or Codex)."
+  echo "All commits must include a Co-authored-by line for a supported coding agent."
+  echo ""
+  echo "Expected one of these trailers:"
+  echo "  Co-authored-by: Claude <noreply@anthropic.com>"
+  echo "  Co-authored-by: Codex <codex@openai.com>"
+  echo "  Co-authored-by: Cursor <noreply@cursor.com>"
+  echo "  Co-authored-by: OpenCode <noreply@opencode.ai>"
+  echo "  Co-authored-by: Antigravity <noreply@google.com>"
+  echo "  Co-authored-by: Copilot <noreply@github.com>"
+  echo ""
+  echo "OpenCode commits must also include:"
+  echo "  AI-Agent: OpenCode"
+  echo "  AI-Model: <provider/model>"
+  echo "  AI-Effort: <effort or runtime value>"
+  echo ""
+  echo "Agents outside the supported fleet (e.g. Devin) may commit by supplying"
+  echo "the same AI-Agent/AI-Model/AI-Effort trailers with their own agent name."
   echo ""
   echo "If you're using Claude Code, use the /git:commit command"
   echo "If you're using Codex, enable commit_attribution in .codex/config.toml"
+  echo "If you're using OpenCode, include the OpenCode trailer and AI-* metadata"
   echo ""
   lisa_commit_gate_families ai-coauthorship
   exit 1
 fi
 
+if printf '%s\n' "$COAUTHOR_TRAILERS" | grep -Eiq "Co-authored-by:.*OpenCode"; then
+  missing_opencode_metadata=0
+  if ! printf '%s\n' "$ALL_TRAILERS" | grep -Eiq "^AI-Agent:[[:space:]]*OpenCode[[:space:]]*$"; then
+    missing_opencode_metadata=1
+  fi
+  if ! printf '%s\n' "$ALL_TRAILERS" | grep -Eiq "^AI-Model:[[:space:]]*[^[:space:]].*$"; then
+    missing_opencode_metadata=1
+  fi
+  if ! printf '%s\n' "$ALL_TRAILERS" | grep -Eiq "^AI-Effort:[[:space:]]*[^[:space:]].*$"; then
+    missing_opencode_metadata=1
+  fi
+
+  if [ "$missing_opencode_metadata" -eq 1 ]; then
+    echo ""
+    echo "❌ OpenCode commits must include AI metadata trailers!"
+    echo ""
+    echo "Expected trailers:"
+    echo "  AI-Agent: OpenCode"
+    echo "  AI-Model: <provider/model>"
+    echo "  AI-Effort: <effort or runtime value>"
+    echo ""
+    lisa_commit_gate_families ai-coauthorship
+    exit 1
+  fi
+fi
+
 # END: AI GUARDRAILS