@codyswann/lisa 4.84.6 → 4.84.7

package/package.json

@@ -189,7 +189,7 @@
     "qs": "^6.16.0"
   },
   "name": "@codyswann/lisa",
-  "version": "4.84.6",
+  "version": "4.84.7",
   "description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
   "main": "dist/index.js",
   "exports": {
@@ -347,7 +347,7 @@
     "test": "tests"
   },
   "types": "./dist/index.d.ts",
-  "lisaReleaseCommit": "26506db550db7f036466d2978c8a6448fa1f7f89",
-  "gitHead": "26506db550db7f036466d2978c8a6448fa1f7f89",
-  "lisaReleaseTag": "v4.84.6"
+  "lisaReleaseCommit": "c4b4854246e19e87038c9a31bc480085e1e004bf",
+  "gitHead": "c4b4854246e19e87038c9a31bc480085e1e004bf",
+  "lisaReleaseTag": "v4.84.7"
 }

package/plugins/lisa/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "4.84.6",
+  "version": "4.84.7",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "4.84.6",
+  "version": "4.84.7",
   "description": "Universal governance: agents, skills, commands, hooks, and rules for all projects.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/hooks/block-host-name-leak.mjs

@@ -287,8 +287,16 @@ export function publishableText(tokens, cwd, noun) {
       const value = valueAt(tokens, index);
       // On `gh api`, `-F` is `--field`: `key=@path` or `key=value`. Read as a
       // bare path, `body=@file` named no file and published unchecked (#4462).
-      if (noun === "api" && /^[\w.[\]-]+=/u.test(value))
-        return [fieldSource(value, cwd)];
+      if (
+        (noun === "api" || (noun === undefined && bare === "-F")) &&
+        /^[\w.[\]-]+=/u.test(value)
+      ) {
+        const field = fieldSource(value, cwd);
+        if (noun === "api") return [field];
+        // An unresolved noun may become api or issue/pr. Inspect both possible
+        // meanings of -F without evaluating the expansion or certifying routing.
+        return [field, { origin: value, text: readIfPresent(value, cwd) }];
+      }
       const file = value.replace(/^@/u, "");
       return [{ origin: file, text: readIfPresent(file, cwd) }];
     }
@@ -414,20 +422,24 @@ export async function evaluate(command, projectDir) {
     // protection, and name the unread input instead of claiming the text clean.
     if (
       context.cwd === undefined &&
-      [...context.flags].some(([flag, item]) => {
+      [
+        ...context.flags,
+        ...(context.noun === "api" || context.noun === undefined
+          ? context.fieldOccurrences
+          : []),
+      ].some(([flag, item]) => {
         const field =
-          context.noun === "api" && FIELD_FLAGS.has(flag)
+          (context.noun === "api" || context.noun === undefined) &&
+          FIELD_FLAGS.has(flag)
             ? /^([^=]+)=@(.+)$/u.exec(item.value)
             : null;
-        const file =
-          field !== null
-            ? PROSE_FIELDS.has(field[1])
-              ? field[2]
-              : undefined
-            : FILE_FLAGS.has(flag)
-              ? item.value.replace(/^@/, "")
-              : undefined;
-        return file !== undefined && !path.isAbsolute(file);
+        const files = [
+          field !== null && PROSE_FIELDS.has(field[1]) ? field[2] : undefined,
+          FILE_FLAGS.has(flag) && (context.noun !== "api" || field === null)
+            ? item.value.replace(/^@/, "")
+            : undefined,
+        ];
+        return files.some(file => file !== undefined && !path.isAbsolute(file));
       })
     ) {
       return {

package/plugins/lisa/hooks/host-name-command-context.mjs

@@ -103,6 +103,7 @@ function words(command) {
  */
 function argumentsOf(input) {
   const flags = new Map(),
+    fieldOccurrences = [],
     positional = [],
     tokens = [];
   // Any expansion can add/replace routing arguments after shell word splitting.
@@ -139,23 +140,34 @@ function argumentsOf(input) {
         flag === "-R" ? "--repo" : flag === "-X" ? "--method" : flag,
         value
       );
+      // API fields are additive even though routing options use last values.
+      if (FIELD_FLAGS.has(flag)) fieldOccurrences.push([flag, value]);
       tokens.push(value.value);
     } else if (!word.value.startsWith("-")) positional.push(word);
     else if (!word.literal) certain = false;
   }
-  const noun = positional[0]?.value,
-    verb = positional[1]?.value;
+  const nounWord = positional[0],
+    verbWord = positional[1];
+  const noun = nounWord?.literal ? nounWord.value : undefined,
+    verb = verbWord?.value;
+  // Command-name expansions can supply several argv words. A following
+  // read-looking literal does not prove that the expanded command is a read.
+  const uncertainName =
+    nounWord?.literal === false ||
+    (["issue", "pr"].includes(noun) && verbWord?.literal === false);
   const method = flags.get("--method");
   const writes =
-    noun === "api"
+    uncertainName ||
+    (noun === "api"
       ? method
         ? !method.literal || METHODS.has(method.value.toUpperCase())
         : [...FIELD_FLAGS].some(flag => flags.has(flag)) ||
           Boolean(flags.get("--input")?.value)
       : ["issue", "pr"].includes(noun) &&
-        ["create", "comment", "edit"].includes(verb);
+        ["create", "comment", "edit"].includes(verb));
   return {
     flags,
+    fieldOccurrences,
     positional,
     tokens: ["gh", ...tokens],
     noun,

package/plugins/lisa-agy/hooks/block-host-name-leak.mjs

@@ -287,8 +287,16 @@ export function publishableText(tokens, cwd, noun) {
       const value = valueAt(tokens, index);
       // On `gh api`, `-F` is `--field`: `key=@path` or `key=value`. Read as a
       // bare path, `body=@file` named no file and published unchecked (#4462).
-      if (noun === "api" && /^[\w.[\]-]+=/u.test(value))
-        return [fieldSource(value, cwd)];
+      if (
+        (noun === "api" || (noun === undefined && bare === "-F")) &&
+        /^[\w.[\]-]+=/u.test(value)
+      ) {
+        const field = fieldSource(value, cwd);
+        if (noun === "api") return [field];
+        // An unresolved noun may become api or issue/pr. Inspect both possible
+        // meanings of -F without evaluating the expansion or certifying routing.
+        return [field, { origin: value, text: readIfPresent(value, cwd) }];
+      }
       const file = value.replace(/^@/u, "");
       return [{ origin: file, text: readIfPresent(file, cwd) }];
     }
@@ -414,20 +422,24 @@ export async function evaluate(command, projectDir) {
     // protection, and name the unread input instead of claiming the text clean.
     if (
       context.cwd === undefined &&
-      [...context.flags].some(([flag, item]) => {
+      [
+        ...context.flags,
+        ...(context.noun === "api" || context.noun === undefined
+          ? context.fieldOccurrences
+          : []),
+      ].some(([flag, item]) => {
         const field =
-          context.noun === "api" && FIELD_FLAGS.has(flag)
+          (context.noun === "api" || context.noun === undefined) &&
+          FIELD_FLAGS.has(flag)
             ? /^([^=]+)=@(.+)$/u.exec(item.value)
             : null;
-        const file =
-          field !== null
-            ? PROSE_FIELDS.has(field[1])
-              ? field[2]
-              : undefined
-            : FILE_FLAGS.has(flag)
-              ? item.value.replace(/^@/, "")
-              : undefined;
-        return file !== undefined && !path.isAbsolute(file);
+        const files = [
+          field !== null && PROSE_FIELDS.has(field[1]) ? field[2] : undefined,
+          FILE_FLAGS.has(flag) && (context.noun !== "api" || field === null)
+            ? item.value.replace(/^@/, "")
+            : undefined,
+        ];
+        return files.some(file => file !== undefined && !path.isAbsolute(file));
       })
     ) {
       return {

package/plugins/lisa-agy/hooks/host-name-command-context.mjs

@@ -103,6 +103,7 @@ function words(command) {
  */
 function argumentsOf(input) {
   const flags = new Map(),
+    fieldOccurrences = [],
     positional = [],
     tokens = [];
   // Any expansion can add/replace routing arguments after shell word splitting.
@@ -139,23 +140,34 @@ function argumentsOf(input) {
         flag === "-R" ? "--repo" : flag === "-X" ? "--method" : flag,
         value
       );
+      // API fields are additive even though routing options use last values.
+      if (FIELD_FLAGS.has(flag)) fieldOccurrences.push([flag, value]);
       tokens.push(value.value);
     } else if (!word.value.startsWith("-")) positional.push(word);
     else if (!word.literal) certain = false;
   }
-  const noun = positional[0]?.value,
-    verb = positional[1]?.value;
+  const nounWord = positional[0],
+    verbWord = positional[1];
+  const noun = nounWord?.literal ? nounWord.value : undefined,
+    verb = verbWord?.value;
+  // Command-name expansions can supply several argv words. A following
+  // read-looking literal does not prove that the expanded command is a read.
+  const uncertainName =
+    nounWord?.literal === false ||
+    (["issue", "pr"].includes(noun) && verbWord?.literal === false);
   const method = flags.get("--method");
   const writes =
-    noun === "api"
+    uncertainName ||
+    (noun === "api"
       ? method
         ? !method.literal || METHODS.has(method.value.toUpperCase())
         : [...FIELD_FLAGS].some(flag => flags.has(flag)) ||
           Boolean(flags.get("--input")?.value)
       : ["issue", "pr"].includes(noun) &&
-        ["create", "comment", "edit"].includes(verb);
+        ["create", "comment", "edit"].includes(verb));
   return {
     flags,
+    fieldOccurrences,
     positional,
     tokens: ["gh", ...tokens],
     noun,

package/plugins/lisa-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "4.84.6",
+  "version": "4.84.7",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "4.84.6",
+  "version": "4.84.7",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "4.84.6",
+  "version": "4.84.7",
   "description": "AWS CDK-specific Lisa plugin.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "4.84.6",
+  "version": "4.84.7",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "4.84.6",
+  "version": "4.84.7",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "4.84.6",
+  "version": "4.84.7",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-devin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "4.84.6",
+  "version": "4.84.7",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-devin/.devin-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "4.84.6",
+  "version": "4.84.7",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "4.84.6",
+  "version": "4.84.7",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-copilot/hooks/block-host-name-leak.mjs

@@ -287,8 +287,16 @@ export function publishableText(tokens, cwd, noun) {
       const value = valueAt(tokens, index);
       // On `gh api`, `-F` is `--field`: `key=@path` or `key=value`. Read as a
       // bare path, `body=@file` named no file and published unchecked (#4462).
-      if (noun === "api" && /^[\w.[\]-]+=/u.test(value))
-        return [fieldSource(value, cwd)];
+      if (
+        (noun === "api" || (noun === undefined && bare === "-F")) &&
+        /^[\w.[\]-]+=/u.test(value)
+      ) {
+        const field = fieldSource(value, cwd);
+        if (noun === "api") return [field];
+        // An unresolved noun may become api or issue/pr. Inspect both possible
+        // meanings of -F without evaluating the expansion or certifying routing.
+        return [field, { origin: value, text: readIfPresent(value, cwd) }];
+      }
       const file = value.replace(/^@/u, "");
       return [{ origin: file, text: readIfPresent(file, cwd) }];
     }
@@ -414,20 +422,24 @@ export async function evaluate(command, projectDir) {
     // protection, and name the unread input instead of claiming the text clean.
     if (
       context.cwd === undefined &&
-      [...context.flags].some(([flag, item]) => {
+      [
+        ...context.flags,
+        ...(context.noun === "api" || context.noun === undefined
+          ? context.fieldOccurrences
+          : []),
+      ].some(([flag, item]) => {
         const field =
-          context.noun === "api" && FIELD_FLAGS.has(flag)
+          (context.noun === "api" || context.noun === undefined) &&
+          FIELD_FLAGS.has(flag)
             ? /^([^=]+)=@(.+)$/u.exec(item.value)
             : null;
-        const file =
-          field !== null
-            ? PROSE_FIELDS.has(field[1])
-              ? field[2]
-              : undefined
-            : FILE_FLAGS.has(flag)
-              ? item.value.replace(/^@/, "")
-              : undefined;
-        return file !== undefined && !path.isAbsolute(file);
+        const files = [
+          field !== null && PROSE_FIELDS.has(field[1]) ? field[2] : undefined,
+          FILE_FLAGS.has(flag) && (context.noun !== "api" || field === null)
+            ? item.value.replace(/^@/, "")
+            : undefined,
+        ];
+        return files.some(file => file !== undefined && !path.isAbsolute(file));
       })
     ) {
       return {

package/plugins/lisa-copilot/hooks/host-name-command-context.mjs

@@ -103,6 +103,7 @@ function words(command) {
  */
 function argumentsOf(input) {
   const flags = new Map(),
+    fieldOccurrences = [],
     positional = [],
     tokens = [];
   // Any expansion can add/replace routing arguments after shell word splitting.
@@ -139,23 +140,34 @@ function argumentsOf(input) {
         flag === "-R" ? "--repo" : flag === "-X" ? "--method" : flag,
         value
       );
+      // API fields are additive even though routing options use last values.
+      if (FIELD_FLAGS.has(flag)) fieldOccurrences.push([flag, value]);
       tokens.push(value.value);
     } else if (!word.value.startsWith("-")) positional.push(word);
     else if (!word.literal) certain = false;
   }
-  const noun = positional[0]?.value,
-    verb = positional[1]?.value;
+  const nounWord = positional[0],
+    verbWord = positional[1];
+  const noun = nounWord?.literal ? nounWord.value : undefined,
+    verb = verbWord?.value;
+  // Command-name expansions can supply several argv words. A following
+  // read-looking literal does not prove that the expanded command is a read.
+  const uncertainName =
+    nounWord?.literal === false ||
+    (["issue", "pr"].includes(noun) && verbWord?.literal === false);
   const method = flags.get("--method");
   const writes =
-    noun === "api"
+    uncertainName ||
+    (noun === "api"
       ? method
         ? !method.literal || METHODS.has(method.value.toUpperCase())
         : [...FIELD_FLAGS].some(flag => flags.has(flag)) ||
           Boolean(flags.get("--input")?.value)
       : ["issue", "pr"].includes(noun) &&
-        ["create", "comment", "edit"].includes(verb);
+        ["create", "comment", "edit"].includes(verb));
   return {
     flags,
+    fieldOccurrences,
     positional,
     tokens: ["gh", ...tokens],
     noun,

package/plugins/lisa-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "4.84.6",
+  "version": "4.84.7",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cursor/hooks/block-host-name-leak.mjs

@@ -287,8 +287,16 @@ export function publishableText(tokens, cwd, noun) {
       const value = valueAt(tokens, index);
       // On `gh api`, `-F` is `--field`: `key=@path` or `key=value`. Read as a
       // bare path, `body=@file` named no file and published unchecked (#4462).
-      if (noun === "api" && /^[\w.[\]-]+=/u.test(value))
-        return [fieldSource(value, cwd)];
+      if (
+        (noun === "api" || (noun === undefined && bare === "-F")) &&
+        /^[\w.[\]-]+=/u.test(value)
+      ) {
+        const field = fieldSource(value, cwd);
+        if (noun === "api") return [field];
+        // An unresolved noun may become api or issue/pr. Inspect both possible
+        // meanings of -F without evaluating the expansion or certifying routing.
+        return [field, { origin: value, text: readIfPresent(value, cwd) }];
+      }
       const file = value.replace(/^@/u, "");
       return [{ origin: file, text: readIfPresent(file, cwd) }];
     }
@@ -414,20 +422,24 @@ export async function evaluate(command, projectDir) {
     // protection, and name the unread input instead of claiming the text clean.
     if (
       context.cwd === undefined &&
-      [...context.flags].some(([flag, item]) => {
+      [
+        ...context.flags,
+        ...(context.noun === "api" || context.noun === undefined
+          ? context.fieldOccurrences
+          : []),
+      ].some(([flag, item]) => {
         const field =
-          context.noun === "api" && FIELD_FLAGS.has(flag)
+          (context.noun === "api" || context.noun === undefined) &&
+          FIELD_FLAGS.has(flag)
             ? /^([^=]+)=@(.+)$/u.exec(item.value)
             : null;
-        const file =
-          field !== null
-            ? PROSE_FIELDS.has(field[1])
-              ? field[2]
-              : undefined
-            : FILE_FLAGS.has(flag)
-              ? item.value.replace(/^@/, "")
-              : undefined;
-        return file !== undefined && !path.isAbsolute(file);
+        const files = [
+          field !== null && PROSE_FIELDS.has(field[1]) ? field[2] : undefined,
+          FILE_FLAGS.has(flag) && (context.noun !== "api" || field === null)
+            ? item.value.replace(/^@/, "")
+            : undefined,
+        ];
+        return files.some(file => file !== undefined && !path.isAbsolute(file));
       })
     ) {
       return {

package/plugins/lisa-cursor/hooks/host-name-command-context.mjs

@@ -103,6 +103,7 @@ function words(command) {
  */
 function argumentsOf(input) {
   const flags = new Map(),
+    fieldOccurrences = [],
     positional = [],
     tokens = [];
   // Any expansion can add/replace routing arguments after shell word splitting.
@@ -139,23 +140,34 @@ function argumentsOf(input) {
         flag === "-R" ? "--repo" : flag === "-X" ? "--method" : flag,
         value
       );
+      // API fields are additive even though routing options use last values.
+      if (FIELD_FLAGS.has(flag)) fieldOccurrences.push([flag, value]);
       tokens.push(value.value);
     } else if (!word.value.startsWith("-")) positional.push(word);
     else if (!word.literal) certain = false;
   }
-  const noun = positional[0]?.value,
-    verb = positional[1]?.value;
+  const nounWord = positional[0],
+    verbWord = positional[1];
+  const noun = nounWord?.literal ? nounWord.value : undefined,
+    verb = verbWord?.value;
+  // Command-name expansions can supply several argv words. A following
+  // read-looking literal does not prove that the expanded command is a read.
+  const uncertainName =
+    nounWord?.literal === false ||
+    (["issue", "pr"].includes(noun) && verbWord?.literal === false);
   const method = flags.get("--method");
   const writes =
-    noun === "api"
+    uncertainName ||
+    (noun === "api"
       ? method
         ? !method.literal || METHODS.has(method.value.toUpperCase())
         : [...FIELD_FLAGS].some(flag => flags.has(flag)) ||
           Boolean(flags.get("--input")?.value)
       : ["issue", "pr"].includes(noun) &&
-        ["create", "comment", "edit"].includes(verb);
+        ["create", "comment", "edit"].includes(verb));
   return {
     flags,
+    fieldOccurrences,
     positional,
     tokens: ["gh", ...tokens],
     noun,

package/plugins/lisa-devin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "4.84.6",
+  "version": "4.84.7",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-devin/.devin-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "4.84.6",
+  "version": "4.84.7",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-devin/hooks/block-host-name-leak.mjs

@@ -287,8 +287,16 @@ export function publishableText(tokens, cwd, noun) {
       const value = valueAt(tokens, index);
       // On `gh api`, `-F` is `--field`: `key=@path` or `key=value`. Read as a
       // bare path, `body=@file` named no file and published unchecked (#4462).
-      if (noun === "api" && /^[\w.[\]-]+=/u.test(value))
-        return [fieldSource(value, cwd)];
+      if (
+        (noun === "api" || (noun === undefined && bare === "-F")) &&
+        /^[\w.[\]-]+=/u.test(value)
+      ) {
+        const field = fieldSource(value, cwd);
+        if (noun === "api") return [field];
+        // An unresolved noun may become api or issue/pr. Inspect both possible
+        // meanings of -F without evaluating the expansion or certifying routing.
+        return [field, { origin: value, text: readIfPresent(value, cwd) }];
+      }
       const file = value.replace(/^@/u, "");
       return [{ origin: file, text: readIfPresent(file, cwd) }];
     }
@@ -414,20 +422,24 @@ export async function evaluate(command, projectDir) {
     // protection, and name the unread input instead of claiming the text clean.
     if (
       context.cwd === undefined &&
-      [...context.flags].some(([flag, item]) => {
+      [
+        ...context.flags,
+        ...(context.noun === "api" || context.noun === undefined
+          ? context.fieldOccurrences
+          : []),
+      ].some(([flag, item]) => {
         const field =
-          context.noun === "api" && FIELD_FLAGS.has(flag)
+          (context.noun === "api" || context.noun === undefined) &&
+          FIELD_FLAGS.has(flag)
             ? /^([^=]+)=@(.+)$/u.exec(item.value)
             : null;
-        const file =
-          field !== null
-            ? PROSE_FIELDS.has(field[1])
-              ? field[2]
-              : undefined
-            : FILE_FLAGS.has(flag)
-              ? item.value.replace(/^@/, "")
-              : undefined;
-        return file !== undefined && !path.isAbsolute(file);
+        const files = [
+          field !== null && PROSE_FIELDS.has(field[1]) ? field[2] : undefined,
+          FILE_FLAGS.has(flag) && (context.noun !== "api" || field === null)
+            ? item.value.replace(/^@/, "")
+            : undefined,
+        ];
+        return files.some(file => file !== undefined && !path.isAbsolute(file));
       })
     ) {
       return {