f77c1b7fdc
Security hotfix — v0.15.1 Wave 1 fixes from 4-parallel audit. RED-1 (CVE): KEI_DISABLED_HOOKS tokenized match — was `*all*` substring-glob (trivially bypassable via "install", "wall-clock", etc.), now exact-token split on comma/space. Patched in all 9 hooks: no-hand-edit-agents, assemble-agents, assemble-validate, tomd-preread, agent-fork-logger, site-wysiwyd-check, error-spike-detector, milestone-commit-hook, session-end-dump. RED-2 (observability): minimal profile whitelist now includes agent-fork-logger and session-end-dump (ledger + trace paths) so observability is not silently lost on minimal installs. HIGH: review.json schema minItems:1 on findings — rejects empty reviews; new Rust test review_schema_rejects_empty_findings. HIGH: typed-handoff wire-up — produces_artifact declared at top level on 5 manifests (kei-security-auditor, kei-validator, kei-architect, kei-code-implementer, kei-critic); duplicate per-handoff declarations removed. MED: kei-artifact validate.rs gains warn_unsupported_keywords — non-fatal stderr warning when schema uses keywords outside the hand-rolled 2020-12 subset. LOW: CI Node matrix dropped 18, now ['20','22']. Doc drift: skills/hooks-control/SKILL.md reflects tokenized-match semantics and updated minimal-profile hook list. Tests: 191 Rust workspace + 30 assembler (both pass). RED-1 reproducer 10/10 (4 former-CVE vectors blocked, 5 legit vectors accepted, empty passes). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
79 lines
2.7 KiB
Bash
Executable file
79 lines
2.7 KiB
Bash
Executable file
#!/bin/sh
|
|
# session-end-dump.sh — Stop event hook (RULE 0.14).
|
|
#
|
|
# On session end: save the transcript JSONL to ~/.claude/memory/traces/
|
|
# and call `kei-memory ingest` if the primitive is installed. NEVER blocks:
|
|
# every exit path is `exit 0`. No jq → silent no-op. No kei-memory → still
|
|
# saves the raw trace so later installs can back-fill.
|
|
|
|
command -v jq >/dev/null 2>&1 || exit 0
|
|
|
|
# --- RUNTIME CONTROLS (v0.15.1) ---
|
|
# KEI_DISABLED_HOOKS: tokenized exact-match list (comma- or space-separated).
|
|
# Repro of pre-v0.15.1 substring bypass (CVE-class): KEI_DISABLED_HOOKS="foo-all-bar"
|
|
# previously disabled every hook via `*all*`. v0.15.1 requires token equality.
|
|
_hook_name="$(basename "$0" .sh)"
|
|
_disabled=" $(printf '%s' "${KEI_DISABLED_HOOKS:-}" | tr ',' ' ') "
|
|
case "$_disabled" in
|
|
*" $_hook_name "*|*" all "*) unset _disabled; exit 0 ;;
|
|
esac
|
|
unset _disabled
|
|
case "${KEI_HOOK_PROFILE:-full}" in
|
|
off) exit 0 ;;
|
|
minimal)
|
|
case "$_hook_name" in
|
|
no-hand-edit-agents|assemble-validate|agent-fork-logger|session-end-dump) ;;
|
|
*) exit 0 ;;
|
|
esac
|
|
;;
|
|
advisory-off)
|
|
case "$_hook_name" in
|
|
recurrence-suggest|citation-verify|error-spike-detector|milestone-commit-hook) exit 0 ;;
|
|
esac
|
|
;;
|
|
full|*) ;;
|
|
esac
|
|
# --- end runtime controls ---
|
|
|
|
set -eu
|
|
|
|
input="$(cat)"
|
|
|
|
session_id=$(printf '%s' "$input" | jq -r '.session_id // empty' 2>/dev/null || true)
|
|
transcript=$(printf '%s' "$input" | jq -r '.transcript_path // .transcript // empty' 2>/dev/null || true)
|
|
|
|
# Nothing to dump without an id — silent no-op.
|
|
if [ -z "$session_id" ]; then
|
|
exit 0
|
|
fi
|
|
|
|
# Destination dir for trace archives (created lazily).
|
|
traces_dir="${HOME}/.claude/memory/traces"
|
|
mkdir -p "$traces_dir" 2>/dev/null || exit 0
|
|
|
|
dest="${traces_dir}/${session_id}.jsonl"
|
|
|
|
# If Claude Code provides a transcript path, copy the JSONL to our store.
|
|
# If transcript is missing, leave dest un-created — analyzer falls back to
|
|
# no-op for that session and logs a zero-event row on next ingest.
|
|
if [ -n "$transcript" ] && [ -f "$transcript" ]; then
|
|
cp -f "$transcript" "$dest" 2>/dev/null || true
|
|
fi
|
|
|
|
# Best-effort ingest — advisory only; never blocks the session from ending.
|
|
if command -v kei-memory >/dev/null 2>&1 && [ -f "$dest" ]; then
|
|
kei-memory ingest \
|
|
--session-id "$session_id" \
|
|
--transcript "$dest" \
|
|
>/dev/null 2>&1 || true
|
|
fi
|
|
|
|
# v0.11 sleep-sync (RULE 0.15) — push traces to the user's memory-repo so a
|
|
# cloud agent can consolidate them overnight. Silent no-op when the primitive
|
|
# is absent or the user hasn't opted in via /sleep-setup.
|
|
sleep_sync="${HOME}/.claude/agents/_primitives/kei-sleep-sync.sh"
|
|
if [ -x "$sleep_sync" ]; then
|
|
"$sleep_sync" >/dev/null 2>&1 || true
|
|
fi
|
|
|
|
exit 0
|