@codyswann/lisa 4.71.5 → 4.71.7

package/plugins/lisa/skills/lisa-queue-status/SKILL.md

@@ -86,11 +86,51 @@ Alongside the two work queues, report the **arming state of the repo's open pull
 Run the sweep rather than eyeballing the list — an LLM reading PR pages one at a time is exactly the shell-loop-by-prose failure #3512 records:
 
 ```bash
-gh pr list --state open --limit 200 \
-  --json number,title,url,isDraft,labels,body,autoMergeRequest \
-  | node "${CLAUDE_PLUGIN_ROOT}/scripts/pr-arming-sweep.mjs"
+repository=$(gh repo view --json nameWithOwner --jq .nameWithOwner) || {
+  printf '%s\n' 'NOT_MEASURED: could not resolve the current repository.' >&2
+  exit 2
+}
+pages=$(gh api --paginate --slurp \
+  "repos/$repository/pulls?state=open&per_page=100") || {
+  printf '%s\n' 'NOT_MEASURED: could not read every open pull request page.' >&2
+  exit 2
+}
+prs=$(printf '%s\n' "$pages" | jq -ce '
+  def complete_pr:
+    try (
+      has("auto_merge") and
+      (.auto_merge == null or
+        (.auto_merge.merge_method as $method | ["merge", "squash", "rebase"] |
+          index($method)) != null) and
+      (.number | type) == "number" and .number > 0 and
+      (.title | type) == "string" and (.html_url | type) == "string" and
+      (.draft | type) == "boolean" and has("body") and
+      (.body == null or (.body | type) == "string") and
+      (.labels | type) == "array" and all(.labels[]; (.name | type) == "string")
+    ) catch false;
+  if type != "array" then error("Invalid PR page response")
+  elif length == 0 or any(.[]; type != "array") then error("Missing PR pages")
+  elif any(.[][]; complete_pr | not) then error("Incomplete PR metadata")
+  else [.[][] | {
+    number, title, url: .html_url, isDraft: .draft, labels, body,
+    autoMergeRequest: .auto_merge
+  }] end') || {
+  printf '%s\n' 'NOT_MEASURED: incomplete pull request response.' >&2
+  exit 2
+}
+printf '%s\n' "$prs" | node \
+  "${CLAUDE_PLUGIN_ROOT:-${PLUGIN_ROOT:-node_modules/@codyswann/lisa/plugins/lisa}}/scripts/pr-arming-sweep.mjs"
 ```
 
+`gh api --paginate --slurp` follows every REST page before the sweep starts;
+there is no repository-wide row cap. Keep `auto_merge` present during conversion:
+an absent field is an unread measurement, while explicit `null` means unarmed.
+On any API or response validation failure, report `NOT_MEASURED` and stop this
+read. Never report a partial queue as clean. The script path honors an exported
+plugin root and otherwise resolves from the current project's installed Lisa
+package; bare `plugins/lisa` paths are relative to Lisa's own checkout and do not
+work from a consuming project.
+
 Report the verdict verbatim, and never translate it into an absence:
 
 - `MEASURED_CLEAN` — a **positive assertion**: N open PRs were read and every one is armed or deliberately unarmed. Say the count. "Nothing to report" is not the same sentence and must not be substituted for it.

package/plugins/lisa-agy/hooks/block-direct-issue-create.sh

@@ -211,11 +211,29 @@ if [ "$tool_name" != "Bash" ]; then
       exit 0
       ;;
   esac
-  case "$tool_name" in
+  # These terminal actions edit an existing item, not create the item.
+  # Strip only the measured action shape, then still inspect any preceding
+  # compound operation: create_issue_and_add_issue_comment remains a filing.
+  creation_name="$tool_name"
+  case "$creation_name" in
+    *[Aa]dd_[Ii]ssue_[Cc]omment)
+      creation_name="${creation_name%[Aa]dd_[Ii]ssue_[Cc]omment}" ;;
+    *[Aa]dd[Cc]omment[Tt]o[Jj]ira[Ii]ssue)
+      creation_name="${creation_name%[Aa]dd[Cc]omment[Tt]o[Jj]ira[Ii]ssue}" ;;
+    *[Aa]dd_[Cc]omment_[Tt]o_[Ii]ssue)
+      creation_name="${creation_name%[Aa]dd_[Cc]omment_[Tt]o_[Ii]ssue}" ;;
+    *[Aa]dd_[Ii]ssue_[Ll]abels)
+      creation_name="${creation_name%[Aa]dd_[Ii]ssue_[Ll]abels}" ;;
+    *[Aa]dd_[Ll]abels_[Tt]o_[Ii]ssue)
+      creation_name="${creation_name%[Aa]dd_[Ll]abels_[Tt]o_[Ii]ssue}" ;;
+    *[Aa]dd_[Rr]eaction_[Tt]o_[Ii]ssue_[Cc]omment)
+      creation_name="${creation_name%[Aa]dd_[Rr]eaction_[Tt]o_[Ii]ssue_[Cc]omment}" ;;
+  esac
+  case "$creation_name" in
     *[Cc]reate* | *[Nn]ew* | *[Aa]dd* | *[Ff]ile*) ;;
     *) exit 0 ;;
   esac
-  case "$tool_name" in
+  case "$creation_name" in
     *[Ii]ssue* | *[Tt]icket* | *[Tt]ask* | *[Ss]tory* | *[Bb]ug* | *[Ee]pic* | *[Ww]ork*) ;;
     *) exit 0 ;;
   esac

package/plugins/lisa-agy/hooks/block-managed-file-edits.sh

@@ -598,9 +598,25 @@ BACKSLASH = chr(92)
 NEWLINE = chr(10)
 
 STATEMENT_SEPARATORS = {";", "|", "||", "&", "&&", "(", ")", "&|"}
-# `>`, `>>`, and the noclobber override `>|`.
-REDIRECT_OUT = {">", ">>", ">|"}
+# Ordinary output, noclobber override, and combined stdout/stderr output.
+# shlex separates fd prefixes (e.g. 10>>) from the operator automatically.
+REDIRECT_OUT = {">", ">>", ">|", "&>", "&>>", ">&"}
 REDIRECT_IN = "<"
+SYNTAX_OPERATORS = STATEMENT_SEPARATORS | REDIRECT_OUT | {REDIRECT_IN}
+# shlex groups adjacent punctuation even across distinct shell operators.
+# Retain other shell operators intact so a here-string is not three `<` reads.
+PUNCTUATION = re.compile(r"^[();<>|&]+$")
+SHELL_OPERATOR = re.compile("|".join(
+    re.escape(operator) for operator in sorted(
+        SYNTAX_OPERATORS | {"<<<", "<<", "<&", "<>", ";;&", ";;", ";&", "|&"},
+        key=lambda operator: (-len(operator), operator),
+    )
+))
+
+
+class LiteralOperator(str):
+    """Quoted or escaped operator text is an argument, never shell syntax."""
+
 
 SHELL_PROGRAMS = {"bash", "dash", "ksh", "sh", "zsh"}
 SOURCE_BUILTINS = {"source", "."}
@@ -664,8 +680,30 @@ def normalise_lines(text):
     Returns:
         The same text with line breaks spelled as separators.
     """
-    joined = text.replace(BACKSLASH + NEWLINE, " ")
-    return joined.replace(NEWLINE, " ; ")
+    output = []
+    quote = ""
+    position = 0
+    while position < len(text):
+        character = text[position]
+        if character == BACKSLASH and quote != "'" and position + 1 < len(text):
+            following = text[position + 1]
+            # The shell deletes continuations; inserting whitespace can split
+            # an operator or pathname and hide the actual output target.
+            if following != NEWLINE:
+                output.extend((character, following))
+            position += 2
+            continue
+        if quote:
+            if character == quote:
+                quote = ""
+        elif character in "'\"":
+            quote = character
+        if character == NEWLINE and not quote:
+            output.append(" ; ")
+        else:
+            output.append(character)
+        position += 1
+    return "".join(output)
 
 
 def tokenize(text):
@@ -677,13 +715,30 @@ def tokenize(text):
     Returns:
         The token list, or None when the text does not lex.
     """
-    lexer = shlex.shlex(normalise_lines(text), posix=True, punctuation_chars=True)
+    normalized = normalise_lines(text)
+    lexer = shlex.shlex(normalized, posix=True, punctuation_chars=True)
     lexer.whitespace_split = True
     # `#` is not a comment introducer on a typed command line, and letting shlex
     # treat it as one silently truncates the rest of the line.
     lexer.commenters = ""
     try:
-        return list(lexer)
+        tokens = []
+        start = 0
+        for token in lexer:
+            # shlex strips quotes/escapes and reads one character ahead when
+            # emitting punctuation. Exclude its character pushback from the
+            # consumed source span so a quoted operator retains its provenance.
+            end = lexer.instream.tell() - len(lexer._pushback_chars)
+            raw = normalized[start:end].strip()
+            start = end
+            if PUNCTUATION.fullmatch(token):
+                if raw != token:
+                    tokens.append(LiteralOperator(token))
+                else:
+                    tokens.extend(SHELL_OPERATOR.findall(token))
+            else:
+                tokens.append(token)
+        return tokens
     except ValueError:
         return None
 
@@ -745,7 +800,7 @@ def statements(tokens):
     grouped = []
     current = []
     for token in tokens:
-        if token in STATEMENT_SEPARATORS:
+        if not isinstance(token, LiteralOperator) and token in STATEMENT_SEPARATORS:
             grouped.append(current)
             current = []
             continue
@@ -929,8 +984,14 @@ def write_targets(statement):
     found = []
     _token, program, args = command_word(statement)
     for index, token in enumerate(statement):
-        if token in REDIRECT_OUT and index + 1 < len(statement):
-            found.append(statement[index + 1])
+        if not isinstance(token, LiteralOperator) and token in REDIRECT_OUT and index + 1 < len(statement):
+            target = statement[index + 1]
+            # >&digit duplicates an fd, >&digit- moves it, and >&- closes it.
+            # Only the nonnumeric >&word form opens a pathname; &>1 still
+            # writes a file named 1 and must remain a write candidate.
+            if token == ">&" and re.fullmatch(r"(?:[0-9]+-?|-)", target):
+                continue
+            found.append(target)
     if program == "tee":
         found.extend(token for token in args if not token.startswith("-"))
     elif program == "sed" and any(IN_PLACE.match(token) for token in args):
@@ -956,7 +1017,7 @@ def executed_script(statement):
     if program in SHELL_PROGRAMS:
         for index, token in enumerate(statement):
             # `bash < script.sh` runs that file as surely as `bash script.sh`.
-            if token == REDIRECT_IN and index + 1 < len(statement):
+            if not isinstance(token, LiteralOperator) and token == REDIRECT_IN and index + 1 < len(statement):
                 return statement[index + 1]
         return shell_script_operand(args)
     if program in SOURCE_BUILTINS:

package/plugins/lisa-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "4.71.5",
+  "version": "4.71.7",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-agy/skills/lisa-drive-pr-to-merge/SKILL.md

@@ -582,10 +582,55 @@ sails through the arm gate and the latch goes on over the top of it.
 **Read `reviewDecision` explicitly. Never infer it from a check count.**
 
 ```bash
-gh pr view <pr> --json reviewDecision,reviewThreads \
-  --jq '{decision: .reviewDecision, unresolved: [.reviewThreads[]? | select(.isResolved == false)] | length}'
+review_pages=$(gh api graphql --paginate --slurp \
+  -F owner=<owner> -F repo=<repo> -F pr=<pr> \
+  -f query='query($owner:String!,$repo:String!,$pr:Int!,$endCursor:String){
+    repository(owner:$owner,name:$repo){pullRequest(number:$pr){
+      state reviewDecision autoMergeRequest{enabledAt}
+      reviewThreads(first:100,after:$endCursor){
+        nodes{isResolved isOutdated}
+        pageInfo{hasNextPage endCursor}
+      }
+    }}
+  }') || {
+  printf '%s\n' 'Could not read PR review threads; merge readiness is unknown.' >&2
+  exit 1
+}
+printf '%s\n' "$review_pages" | jq -e '
+  def complete_page:
+    try (
+      ((.errors // []) | length) == 0 and
+      (.data.repository.pullRequest | . as $pr |
+        has("state") and has("reviewDecision") and has("autoMergeRequest") and
+        (["OPEN", "CLOSED", "MERGED"] | index($pr.state)) != null and
+        ([null, "APPROVED", "CHANGES_REQUESTED", "REVIEW_REQUIRED"] |
+          index($pr.reviewDecision)) != null and
+        (.autoMergeRequest == null or
+          (.autoMergeRequest.enabledAt | type) == "string") and
+        (.reviewThreads.nodes | type) == "array" and
+        all(.reviewThreads.nodes[];
+          (.isResolved | type) == "boolean" and (.isOutdated | type) == "boolean") and
+        (.reviewThreads.pageInfo.hasNextPage | type) == "boolean")
+    ) catch false;
+  if type != "array" then
+    error("Incomplete PR review response; merge readiness is unknown")
+  elif length == 0 or any(.[]; complete_page | not) or
+    .[-1].data.repository.pullRequest.reviewThreads.pageInfo.hasNextPage != false
+  then error("Incomplete PR review response; merge readiness is unknown")
+  else {
+    state: .[-1].data.repository.pullRequest.state,
+    armed: (.[-1].data.repository.pullRequest.autoMergeRequest != null),
+    decision: .[-1].data.repository.pullRequest.reviewDecision,
+    unresolved: ([.[].data.repository.pullRequest.reviewThreads.nodes[] |
+      select(.isResolved == false)] | length)
+  } end'
 ```
 
+`reviewThreads` is a GraphQL connection, not a supported `gh pr view --json`
+field. Read every page, including outdated threads that remain unresolved.
+If either the API request or response validation fails, stop with the diagnostic
+above; a failed read must never become a count of zero unresolved threads.
+
 `reviewDecision` is **not part of `statusCheckRollup`**. That is the whole reason
 this stayed invisible: a failing-check count reads **zero** on a PR that can
 never merge, and the checks tab is entirely green. Any rule keyed on "no red
@@ -1440,9 +1485,48 @@ states above, but any point where this run concludes it is finished, hands back,
 or gives up. Re-read, from the live PR, immediately before reporting:
 
 ```bash
-gh pr view <pr> --json state,autoMergeRequest,reviewDecision,reviewThreads \
-  --jq '{state, armed: (.autoMergeRequest != null), decision: .reviewDecision,
-         unresolved: [.reviewThreads[]? | select(.isResolved == false)] | length}'
+review_pages=$(gh api graphql --paginate --slurp \
+  -F owner=<owner> -F repo=<repo> -F pr=<pr> \
+  -f query='query($owner:String!,$repo:String!,$pr:Int!,$endCursor:String){
+    repository(owner:$owner,name:$repo){pullRequest(number:$pr){
+      state reviewDecision autoMergeRequest{enabledAt}
+      reviewThreads(first:100,after:$endCursor){
+        nodes{isResolved isOutdated}
+        pageInfo{hasNextPage endCursor}
+      }
+    }}
+  }') || {
+  printf '%s\n' 'Could not read PR review threads; merge readiness is unknown.' >&2
+  exit 1
+}
+printf '%s\n' "$review_pages" | jq -e '
+  def complete_page:
+    try (
+      ((.errors // []) | length) == 0 and
+      (.data.repository.pullRequest | . as $pr |
+        has("state") and has("reviewDecision") and has("autoMergeRequest") and
+        (["OPEN", "CLOSED", "MERGED"] | index($pr.state)) != null and
+        ([null, "APPROVED", "CHANGES_REQUESTED", "REVIEW_REQUIRED"] |
+          index($pr.reviewDecision)) != null and
+        (.autoMergeRequest == null or
+          (.autoMergeRequest.enabledAt | type) == "string") and
+        (.reviewThreads.nodes | type) == "array" and
+        all(.reviewThreads.nodes[];
+          (.isResolved | type) == "boolean" and (.isOutdated | type) == "boolean") and
+        (.reviewThreads.pageInfo.hasNextPage | type) == "boolean")
+    ) catch false;
+  if type != "array" then
+    error("Incomplete PR review response; merge readiness is unknown")
+  elif length == 0 or any(.[]; complete_page | not) or
+    .[-1].data.repository.pullRequest.reviewThreads.pageInfo.hasNextPage != false
+  then error("Incomplete PR review response; merge readiness is unknown")
+  else {
+    state: .[-1].data.repository.pullRequest.state,
+    armed: (.[-1].data.repository.pullRequest.autoMergeRequest != null),
+    decision: .[-1].data.repository.pullRequest.reviewDecision,
+    unresolved: ([.[].data.repository.pullRequest.reviewThreads.nodes[] |
+      select(.isResolved == false)] | length)
+  } end'
 ```
 
 If `state == OPEN` and `armed` and either `decision == "CHANGES_REQUESTED"` or

package/plugins/lisa-agy/skills/lisa-queue-status/SKILL.md

@@ -86,11 +86,51 @@ Alongside the two work queues, report the **arming state of the repo's open pull
 Run the sweep rather than eyeballing the list — an LLM reading PR pages one at a time is exactly the shell-loop-by-prose failure #3512 records:
 
 ```bash
-gh pr list --state open --limit 200 \
-  --json number,title,url,isDraft,labels,body,autoMergeRequest \
-  | node "${CLAUDE_PLUGIN_ROOT}/scripts/pr-arming-sweep.mjs"
+repository=$(gh repo view --json nameWithOwner --jq .nameWithOwner) || {
+  printf '%s\n' 'NOT_MEASURED: could not resolve the current repository.' >&2
+  exit 2
+}
+pages=$(gh api --paginate --slurp \
+  "repos/$repository/pulls?state=open&per_page=100") || {
+  printf '%s\n' 'NOT_MEASURED: could not read every open pull request page.' >&2
+  exit 2
+}
+prs=$(printf '%s\n' "$pages" | jq -ce '
+  def complete_pr:
+    try (
+      has("auto_merge") and
+      (.auto_merge == null or
+        (.auto_merge.merge_method as $method | ["merge", "squash", "rebase"] |
+          index($method)) != null) and
+      (.number | type) == "number" and .number > 0 and
+      (.title | type) == "string" and (.html_url | type) == "string" and
+      (.draft | type) == "boolean" and has("body") and
+      (.body == null or (.body | type) == "string") and
+      (.labels | type) == "array" and all(.labels[]; (.name | type) == "string")
+    ) catch false;
+  if type != "array" then error("Invalid PR page response")
+  elif length == 0 or any(.[]; type != "array") then error("Missing PR pages")
+  elif any(.[][]; complete_pr | not) then error("Incomplete PR metadata")
+  else [.[][] | {
+    number, title, url: .html_url, isDraft: .draft, labels, body,
+    autoMergeRequest: .auto_merge
+  }] end') || {
+  printf '%s\n' 'NOT_MEASURED: incomplete pull request response.' >&2
+  exit 2
+}
+printf '%s\n' "$prs" | node \
+  "${CLAUDE_PLUGIN_ROOT:-${PLUGIN_ROOT:-node_modules/@codyswann/lisa/plugins/lisa}}/scripts/pr-arming-sweep.mjs"
 ```
 
+`gh api --paginate --slurp` follows every REST page before the sweep starts;
+there is no repository-wide row cap. Keep `auto_merge` present during conversion:
+an absent field is an unread measurement, while explicit `null` means unarmed.
+On any API or response validation failure, report `NOT_MEASURED` and stop this
+read. Never report a partial queue as clean. The script path honors an exported
+plugin root and otherwise resolves from the current project's installed Lisa
+package; bare `plugins/lisa` paths are relative to Lisa's own checkout and do not
+work from a consuming project.
+
 Report the verdict verbatim, and never translate it into an absence:
 
 - `MEASURED_CLEAN` — a **positive assertion**: N open PRs were read and every one is armed or deliberately unarmed. Say the count. "Nothing to report" is not the same sentence and must not be substituted for it.

package/plugins/lisa-cdk/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "4.71.5",
+  "version": "4.71.7",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "4.71.5",
+  "version": "4.71.7",
   "description": "AWS CDK-specific Lisa plugin.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "4.71.5",
+  "version": "4.71.7",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "4.71.5",
+  "version": "4.71.7",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "4.71.5",
+  "version": "4.71.7",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "4.71.5",
+  "version": "4.71.7",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/hooks/block-direct-issue-create.sh

@@ -211,11 +211,29 @@ if [ "$tool_name" != "Bash" ]; then
       exit 0
       ;;
   esac
-  case "$tool_name" in
+  # These terminal actions edit an existing item, not create the item.
+  # Strip only the measured action shape, then still inspect any preceding
+  # compound operation: create_issue_and_add_issue_comment remains a filing.
+  creation_name="$tool_name"
+  case "$creation_name" in
+    *[Aa]dd_[Ii]ssue_[Cc]omment)
+      creation_name="${creation_name%[Aa]dd_[Ii]ssue_[Cc]omment}" ;;
+    *[Aa]dd[Cc]omment[Tt]o[Jj]ira[Ii]ssue)
+      creation_name="${creation_name%[Aa]dd[Cc]omment[Tt]o[Jj]ira[Ii]ssue}" ;;
+    *[Aa]dd_[Cc]omment_[Tt]o_[Ii]ssue)
+      creation_name="${creation_name%[Aa]dd_[Cc]omment_[Tt]o_[Ii]ssue}" ;;
+    *[Aa]dd_[Ii]ssue_[Ll]abels)
+      creation_name="${creation_name%[Aa]dd_[Ii]ssue_[Ll]abels}" ;;
+    *[Aa]dd_[Ll]abels_[Tt]o_[Ii]ssue)
+      creation_name="${creation_name%[Aa]dd_[Ll]abels_[Tt]o_[Ii]ssue}" ;;
+    *[Aa]dd_[Rr]eaction_[Tt]o_[Ii]ssue_[Cc]omment)
+      creation_name="${creation_name%[Aa]dd_[Rr]eaction_[Tt]o_[Ii]ssue_[Cc]omment}" ;;
+  esac
+  case "$creation_name" in
     *[Cc]reate* | *[Nn]ew* | *[Aa]dd* | *[Ff]ile*) ;;
     *) exit 0 ;;
   esac
-  case "$tool_name" in
+  case "$creation_name" in
     *[Ii]ssue* | *[Tt]icket* | *[Tt]ask* | *[Ss]tory* | *[Bb]ug* | *[Ee]pic* | *[Ww]ork*) ;;
     *) exit 0 ;;
   esac

package/plugins/lisa-copilot/hooks/block-managed-file-edits.sh

@@ -598,9 +598,25 @@ BACKSLASH = chr(92)
 NEWLINE = chr(10)
 
 STATEMENT_SEPARATORS = {";", "|", "||", "&", "&&", "(", ")", "&|"}
-# `>`, `>>`, and the noclobber override `>|`.
-REDIRECT_OUT = {">", ">>", ">|"}
+# Ordinary output, noclobber override, and combined stdout/stderr output.
+# shlex separates fd prefixes (e.g. 10>>) from the operator automatically.
+REDIRECT_OUT = {">", ">>", ">|", "&>", "&>>", ">&"}
 REDIRECT_IN = "<"
+SYNTAX_OPERATORS = STATEMENT_SEPARATORS | REDIRECT_OUT | {REDIRECT_IN}
+# shlex groups adjacent punctuation even across distinct shell operators.
+# Retain other shell operators intact so a here-string is not three `<` reads.
+PUNCTUATION = re.compile(r"^[();<>|&]+$")
+SHELL_OPERATOR = re.compile("|".join(
+    re.escape(operator) for operator in sorted(
+        SYNTAX_OPERATORS | {"<<<", "<<", "<&", "<>", ";;&", ";;", ";&", "|&"},
+        key=lambda operator: (-len(operator), operator),
+    )
+))
+
+
+class LiteralOperator(str):
+    """Quoted or escaped operator text is an argument, never shell syntax."""
+
 
 SHELL_PROGRAMS = {"bash", "dash", "ksh", "sh", "zsh"}
 SOURCE_BUILTINS = {"source", "."}
@@ -664,8 +680,30 @@ def normalise_lines(text):
     Returns:
         The same text with line breaks spelled as separators.
     """
-    joined = text.replace(BACKSLASH + NEWLINE, " ")
-    return joined.replace(NEWLINE, " ; ")
+    output = []
+    quote = ""
+    position = 0
+    while position < len(text):
+        character = text[position]
+        if character == BACKSLASH and quote != "'" and position + 1 < len(text):
+            following = text[position + 1]
+            # The shell deletes continuations; inserting whitespace can split
+            # an operator or pathname and hide the actual output target.
+            if following != NEWLINE:
+                output.extend((character, following))
+            position += 2
+            continue
+        if quote:
+            if character == quote:
+                quote = ""
+        elif character in "'\"":
+            quote = character
+        if character == NEWLINE and not quote:
+            output.append(" ; ")
+        else:
+            output.append(character)
+        position += 1
+    return "".join(output)
 
 
 def tokenize(text):
@@ -677,13 +715,30 @@ def tokenize(text):
     Returns:
         The token list, or None when the text does not lex.
     """
-    lexer = shlex.shlex(normalise_lines(text), posix=True, punctuation_chars=True)
+    normalized = normalise_lines(text)
+    lexer = shlex.shlex(normalized, posix=True, punctuation_chars=True)
     lexer.whitespace_split = True
     # `#` is not a comment introducer on a typed command line, and letting shlex
     # treat it as one silently truncates the rest of the line.
     lexer.commenters = ""
     try:
-        return list(lexer)
+        tokens = []
+        start = 0
+        for token in lexer:
+            # shlex strips quotes/escapes and reads one character ahead when
+            # emitting punctuation. Exclude its character pushback from the
+            # consumed source span so a quoted operator retains its provenance.
+            end = lexer.instream.tell() - len(lexer._pushback_chars)
+            raw = normalized[start:end].strip()
+            start = end
+            if PUNCTUATION.fullmatch(token):
+                if raw != token:
+                    tokens.append(LiteralOperator(token))
+                else:
+                    tokens.extend(SHELL_OPERATOR.findall(token))
+            else:
+                tokens.append(token)
+        return tokens
     except ValueError:
         return None
 
@@ -745,7 +800,7 @@ def statements(tokens):
     grouped = []
     current = []
     for token in tokens:
-        if token in STATEMENT_SEPARATORS:
+        if not isinstance(token, LiteralOperator) and token in STATEMENT_SEPARATORS:
             grouped.append(current)
             current = []
             continue
@@ -929,8 +984,14 @@ def write_targets(statement):
     found = []
     _token, program, args = command_word(statement)
     for index, token in enumerate(statement):
-        if token in REDIRECT_OUT and index + 1 < len(statement):
-            found.append(statement[index + 1])
+        if not isinstance(token, LiteralOperator) and token in REDIRECT_OUT and index + 1 < len(statement):
+            target = statement[index + 1]
+            # >&digit duplicates an fd, >&digit- moves it, and >&- closes it.
+            # Only the nonnumeric >&word form opens a pathname; &>1 still
+            # writes a file named 1 and must remain a write candidate.
+            if token == ">&" and re.fullmatch(r"(?:[0-9]+-?|-)", target):
+                continue
+            found.append(target)
     if program == "tee":
         found.extend(token for token in args if not token.startswith("-"))
     elif program == "sed" and any(IN_PLACE.match(token) for token in args):
@@ -956,7 +1017,7 @@ def executed_script(statement):
     if program in SHELL_PROGRAMS:
         for index, token in enumerate(statement):
             # `bash < script.sh` runs that file as surely as `bash script.sh`.
-            if token == REDIRECT_IN and index + 1 < len(statement):
+            if not isinstance(token, LiteralOperator) and token == REDIRECT_IN and index + 1 < len(statement):
                 return statement[index + 1]
         return shell_script_operand(args)
     if program in SOURCE_BUILTINS: