@codyswann/lisa 4.75.1 → 4.76.0

package/scripts/generate-devin-plugin-artifacts.mjs

@@ -61,8 +61,10 @@ const DEVIN_MANIFEST_FIELDS = Object.freeze([
  * Devin → Claude tool-name shim, emitted into every Devin variant that ships
  * hooks. It reads the hook payload, rewrites a lowercase Devin `tool_name` to
  * the Claude name the guard tests for, and pipes the result into the wrapped
- * hook command, preserving its exit status and output. Without `jq` (which the
- * guards themselves require) the payload passes through unchanged.
+ * hook command, preserving its exit status and output. When a tool event's
+ * mapping cannot run (no `jq`, or `jq` failed) it fails closed with exit 2 —
+ * forwarding the raw lowercase `exec` would make every Bash guard stand down.
+ * Payloads with no `tool_name` (session events) pass through unchanged.
  */
 const DEVIN_TOOL_SHIM_SOURCE = `#!/bin/sh
 # Generated by scripts/generate-devin-plugin-artifacts.mjs — do not edit.
@@ -75,6 +77,11 @@ const DEVIN_TOOL_SHIM_SOURCE = `#!/bin/sh
 # Usage: devin-tool-name-shim.sh <hook command> [args...]
 payload=$(cat)
 normalized=$payload
+mapped=
+case $payload in
+  *'"tool_name"'*) needs_mapping=1 ;;
+  *) needs_mapping=0 ;;
+esac
 if command -v jq >/dev/null 2>&1; then
   mapped=$(printf '%s' "$payload" | jq -c '
     if (.tool_name | type) == "string" then
@@ -93,6 +100,10 @@ if command -v jq >/dev/null 2>&1; then
       }[.] // .)
     else . end' 2>/dev/null) && [ -n "$mapped" ] && normalized=$mapped
 fi
+if [ "$needs_mapping" = 1 ] && [ -z "\${mapped:-}" ]; then
+  echo "Lisa could not map the Devin tool name (jq missing or failed); refusing" >&2
+  exit 2
+fi
 printf '%s' "$normalized" | "$@"
 `;
 

package/ui/index.html

@@ -2483,6 +2483,7 @@
         "agy",
         "copilot",
         "opencode",
+        "devin",
       ];
       /* agentHooks is tri-state:
                  true        — hooks fire. Whatever invocation flags that requires are
@@ -2536,6 +2537,15 @@
           agentHooks: true,
           commands: true,
         },
+        devin: {
+          // Verified by run on Devin CLI 3000.11.3 (CodySwannGT/lisa#4426):
+          // plugin hooks fire in `devin -p`, and a Lisa guard refused a
+          // `--no-verify` commit. Devin has no plugin command surface — its
+          // slash commands are skills — so commands is false.
+          label: "Devin",
+          agentHooks: true,
+          commands: false,
+        },
       };
       /* The currently-selected staff. Every factory page renders against it. */
       DATA.staff = "claude";
@@ -5366,6 +5376,7 @@
                       "agy",
                       "copilot",
                       "opencode",
+                      "devin",
                     ],
                   },
                   {
@@ -7447,7 +7458,7 @@
               {
                 key: "harness",
                 label: "Coding-agent harness",
-                desc: "Which agent(s) Lisa emits artifacts for. fleet targets all six; a single value targets only that agent. Default: claude.",
+                desc: "Which agent(s) Lisa emits artifacts for. fleet targets all seven; a single value targets only that agent. Default: claude.",
                 badges: ["default: claude"],
                 control: sel("fleet", [
                   "claude",
@@ -7456,6 +7467,7 @@
                   "agy",
                   "copilot",
                   "opencode",
+                  "devin",
                   "fleet",
                 ]),
               },
@@ -12780,6 +12792,7 @@
         "agy",
         "copilot",
         "opencode",
+        "devin",
       ];
       function configureRemoteEnvironment(cfg) {
         const snapshot = window.LISA_REMOTE_ENVIRONMENT || {