lockdown-deny.sh autogen header exceeds code-comments TOL=2 #85

New issue

Open

opened 2026-05-26 03:43:13 +00:00 by coilysiren · 0 comments

coilysiren commented

2026-05-26 03:43:13 +00:00

Owner

Problem

coily lockdown --apply --replace writes .claude/lockdown-deny.sh with a 5-line contiguous comment header:

#!/bin/sh
# Auto-generated by coily. Do not edit; regenerate via coily lockdown --apply --replace.
#
# Delegates to coily hook pre-tool-use, which calls the shared
# cli-guard/hook engine with coily's integrity rules + route
# table. See coilysiren/coily#248 + cli-guard#74.
exec coily hook pre-tool-use

agentic-os v0.2.8 code-comments allows max 2 contiguous comment lines, so every coily-managed repo fails the hook on this file. Manual fixes in consumer repos get clobbered the next time coily lockdown runs anywhere.

Fix shape

Shrink the emitted header to <=2 lines in coily's lockdown template:

#!/bin/sh
# Auto-generated by coily lockdown. Delegates to coily hook pre-tool-use.
exec coily hook pre-tool-use

The coily#248 / cli-guard#74 cross-references are durable but belong in this repo's source, not in every consumer repo's autogen file.

Repro

Surfaced fixing coilysiren/backend#91. Manual in-tree edit landed in coilysiren/backend@5c4cc59 as a known-clobberable workaround until this lands.

## Problem `coily lockdown --apply --replace` writes `.claude/lockdown-deny.sh` with a 5-line contiguous comment header: ```sh #!/bin/sh # Auto-generated by coily. Do not edit; regenerate via coily lockdown --apply --replace. # # Delegates to coily hook pre-tool-use, which calls the shared # cli-guard/hook engine with coily's integrity rules + route # table. See coilysiren/coily#248 + cli-guard#74. exec coily hook pre-tool-use ``` agentic-os v0.2.8 `code-comments` allows max 2 contiguous comment lines, so every coily-managed repo fails the hook on this file. Manual fixes in consumer repos get clobbered the next time `coily lockdown` runs anywhere. ## Fix shape Shrink the emitted header to <=2 lines in coily's lockdown template: ```sh #!/bin/sh # Auto-generated by coily lockdown. Delegates to coily hook pre-tool-use. exec coily hook pre-tool-use ``` The coily#248 / cli-guard#74 cross-references are durable but belong in this repo's source, not in every consumer repo's autogen file. ## Repro Surfaced fixing coilysiren/backend#91. Manual in-tree edit landed in coilysiren/backend@5c4cc59 as a known-clobberable workaround until this lands.

coilysiren referenced this issue

2026-05-30 05:43:11 +00:00

coily lockdown emits 5-line comment header that fails agentic-os code-comments TOL=2 #92

coilysiren referenced this issue

2026-05-30 05:43:11 +00:00

lockdown-deny.sh template trips agentic-os v0.2.8 code-comments hook #93

coilysiren referenced this issue

2026-05-30 05:43:12 +00:00

lockdown: emit code-comments-compliant lockdown-deny.sh #94

coilysiren added the

label

2026-05-31 01:52:41 +00:00