Repository navigation
Order Samurai v1.0.0 — DEPRECATED, use v1.0.1
⚠️ DEPRECATED — do not use. This release does not protect anything.If you installed v1.0.0, you were never protected. Please upgrade to
v1.0.1
and re-runsamurai install.
samurai installregistered its hooks into~/.claude/hooks/settings.jsonusing entries
shaped{"name", "command", "async"}. Claude Code loads~/.claude/settings.jsonand
parses{"matcher", "hooks": [{"type": "command", ...}]}— so neither the path nor the
schema matched. The prompt-injection guard and secret scrubber never ran.
samurai doctorreported 5/5 checks passed throughout, because it accepted Order
Samurai's own~/.samurai/settings.jsonas proof of registration. A passing health check
on this version is not evidence that you were protected.Two further defects in this release:
samurai uninstallcould damage your Claude Code configuration. It deregistered by
name, then restored the newestsettings.json.bak.*— but both settings files share that
basename, so it could write Order Samurai's file over your real~/.claude/settings.json.samurai uninstallsilently deleted a paid Pro license. It removed~/.samurai
wholesale, takinglicense.jsonwith it.Upgrading
curl -fsSL https://www.ordersamurai.ai/install.sh | bash export PATH="$HOME/.samurai/core/bin:$PATH" samurai install # registers the hooks (this step was missing from v1.0.0's instructions) samurai doctor # now fails honestly if the guard is not wiredv1.0.1 also removes the stale v1.0.0 hook file on uninstall. Full detail:
CHANGELOG.
Order Samurai v1.0.0 - Local-First Governance & Security Layer for Autonomous Coding Agent Fleets